Cisco 3750G - Catalyst Integrated Wireless LAN Controller Configuration Manual page 723

Chapter 33 Configuring QoS
When configuring policing on an SVI, you can create and configure a hierarchical policy map with these
two levels:
VLAN level—Create this primary level by configuring class maps and classes that specify the port
•
trust state or set a new DSCP or IP precedence value in the packet. The VLAN-level policy map
applies only to the VLAN in an SVI and does not support policers.
Interface level—Create this secondary level by configuring class maps and classes that specify the
•
individual policers on physical ports the belong to the SVI. The interface-level policy map only
supports individual policers and does not support aggregate policers. Beginning with Cisco IOS
Release 12.2(25)SED, you can configure different interface-level policy maps for each class defined
in the VLAN-level policy map.
See the
on page 33-53
Figure 33-5
Figure 33-5
interface-level classification
results for the packet.
Is an interface-level policer
configured for this packet?
Check if the packet is in the
profile by querying the policer.
OL-8550-02
"Classifying, Policing, and Marking Traffic on SVIs by Using Hierarchical Policy Maps" section
for an example of a hierarchical policy map.
shows the policing and marking process when hierarchical policy maps on an SVI.
Policing and Marking Flowchart on SVIs
Start
Get the VLAN and
No
Yes
No
Yes
Pass
through
Check out-of-profile action
configured for this policer.
Modify DSCP according to the
policed-DSCP map. Generate
a new QoS label.
Done
Drop
Drop packet.
Mark
Catalyst 3750 Switch Software Configuration Guide
Understanding QoS
33-11