Cisco WS-SUP32-GE-3B - Supervisor Engine 32 Software Configuration Manual page 592

Configuring PFC QoS
When configuring an entry in an ARP ACL for QoS filtering, note the following information:
•
•
•
•
This example shows how to create an ARP ACL named arp_filtering that only permits ARP traffic from
IP address 1.1.1.1:
Router(config)# arp access-list arp_filtering
Router(config-arp-nacl)# permit ip host 1.1.1.1 mac any
Configuring a Class Map
These sections describe class map configuration:
•
•
•
Creating a Class Map
To create a class map, perform this task:
Command
Router(config)# class-map class_name
Router(config)# no class-map class_name
Class Map Filtering Guidelines and Restrictions
When configuring class map filtering, follow these guidelines and restrictions:
•
•
Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY
38-58
This publication describes the ARP ACL syntax that is supported in hardware by the PFC3B. Any
other ARP ACL syntax displayed by the CLI help when you enter a question mark ("?") is not
supported and cannot be used to filter ARP traffic for QoS.
ACLs entries are scanned in the order you enter them. The first matching entry is used. To improve
performance, place the most commonly used entries near the beginning of the ACL.
An implicit deny ip any mac any entry exists at the end of an ACL unless you include an explicit
permit ip any mac any entry at the end of the list.
All new entries to an existing list are placed at the end of the list. You cannot add entries to the
middle of a list.
Creating a Class Map, page 38-58
Class Map Filtering Guidelines and Restrictions, page 38-58
Configuring Filtering in a Class Map, page 38-59
PFC QoS supports multiple match criteria in class maps configured with the match-any keywords.
When multiple match access-group ACLs are included in a match-any class map, and one ACL
contains a deny entry, all match criteria after the deny entry (either in the same ACL or in different
ACLs) will not be installed in the TCAM.
In the following example, ACLs acl4 and acl5 will not be installed because they follow acl3, which
contains a deny ip any any entry:
ip access-list ext acl3
deny ip any any
class-map cmap1
match access-group acl1
match access-group acl2
match access-group acl3
match access-group acl4
Purpose
Creates a class map.
Deletes a class map.
Chapter 38 Configuring PFC QoS
OL-11439-03