Cisco Catalyst 4500 Series Command Reference Manual page 103

Chapter 2 Cisco IOS Commands for the Catalyst 4500 Series Switches
ip access-list extended AutoQos-4.0-ACL-Scavenger
ip access-list extended AutoQos-4.0-ACL-Default
class-map match-any AutoQos-4.0-VoIP-Data
class-map match-all AutoQos-4.0-Multimedia-Conf-Classify
class-map match-all AutoQos-4.0-Signaling-Classify
class-map match-all AutoQos-4.0-Transaction-Classify
class-map match-all AutoQos-4.0-Bulk-Data-Classify
class-map match-all AutoQos-4.0-Scavenger-Classify
AutoQos-4.0-VoIP-Data-Cos and AutoQos-4.0-VoIP-Signal-Cos are needed to handle instances when
you connect an IP phone to an interface and call the auto qos voip cisco-phone command on that
interface. In this situation, the input service policy on the interface must match VoIP and signaling
packets solely on their CoS markings. This is because switching ASICs on Cisco IP Phones are limited
to only remarking the CoS bits of VoIP and the signaling traffic. Matching DSCP markings results in a
security vulnerability because a user whose PC was connected to an IP phone connected to a switch
would be able to remark DSCP markings of traffic arising from their PC to dscp ef using the NIC on their
PC. This causes incorrect placement of non real-time traffic in the priority queue in the egress direction.
B. Template for the auto qos classify command input service-policy
policy-map AutoQos-4.0-Classify-Input-Policy
OL-25342 -01
permit tcp any any eq 995
permit tcp any any eq 1914
permit tcp any any eq 1214
permit udp any any eq 1214
permit tcp any any range 2300 2400
permit udp any any range 2300 2400
permit tcp any any eq 3689
permit udp any any eq 3689
permit tcp any any range 6881 6999
permit tcp any any eq 11999
permit tcp any any range 28800 29100
permit ip any any
match dscp ef
match cos 5
class-map match-all AutoQos-4.0-VoIP-Data-Cos
match cos 5
class-map match-any AutoQos-4.0-VoIP-Signal
match dscp cs3
match cos 3
class-map match-all AutoQos-4.0-VoIP-Signal-Cos
match cos 3
match access-group name AutoQos-4.0-ACL-Multimedia-Conf
match access-group name AutoQos-4.0-ACL-Signaling
match access-group name AutoQos-4.0-ACL-Transactional-Data
match access-group name AutoQos-4.0-ACL-Bulk-Data
match access-group name AutoQos-4.0-ACL-Scavenger
class-map match-all AutoQos-4.0-Default-Classify
match access-group name AutoQos-4.0-ACL-Default
class AutoQos-4.0-Multimedia-Conf-Classify
set dscp af41
set cos 4
set qos-group 34
class AutoQos-4.0-Signaling-Classify
set dscp cs3
set cos 3
set qos-group 16
class AutoQos-4.0-Transaction-Classify
set dscp af21
set cos 2
set qos-group 18
class AutoQos-4.0-Bulk-Data-Classify
Catalyst 4500 Series Switch Cisco IOS Command Reference—Release IOS XE 3.3.0SG and IOS 15.1(1)SG)
auto qos classify
2-45