Cisco Catalyst 2960 Command Reference Manual page 287

Chapter 2 Catalyst 2960 Switch Cisco IOS Commands
Policing uses a token-bucket algorithm. You configure the bucket depth (the maximum burst that is
tolerated before the bucket overflows) by using the burst-byte option of the police policy-map class
configuration command or the mls qos aggregate-policer global configuration command. You configure
how quickly (the average rate) the tokens are removed from the bucket by using the rate-bps option of
the police policy-map class configuration command or the mls qos aggregate-policer global
configuration command. For more information, see the software configuration guide for this release.
Examples This example shows how to configure a policer that drops packets if traffic exceeds 1 Mb/s average rate
with a burst size of 20 KB. The DSCPs of incoming packets are trusted, and there is no packet
modification.
Switch(config)# policy-map policy1
Switch(config-pmap)# class class1
Switch(config-pmap-c)# trust dscp
Switch(config-pmap-c)# police 1000000 20000 exceed-action drop
Switch(config-pmap-c)# exit
This example shows how to configure a policer, which marks down the DSCP values with the values
defined in policed-DSCP map and sends the packet:
Switch(config)# policy-map policy2
Switch(config-pmap)# class class2
Switch(config-pmap-c)# police 1000000 20000 exceed-action policed-dscp-transmit
Switch(config-pmap-c)# exit
You can verify your settings by entering the show policy-map privileged EXEC command.
Related Commands Command
class
mls qos map
policy-map
set
show policy-map
trust
OL-8604-04
Description
Defines a traffic classification match criteria (through the police, set,
and trust policy-map class configuration commands) for the
specified class-map name.
policed-dscp Applies a policed-DSCP map to a DSCP-trusted port.
Creates or modifies a policy map that can be attached to multiple
ports to specify a service policy.
Classifies IP traffic by setting a DSCP or IP-precedence value in the
packet.
Displays quality of service (QoS) policy maps.
Defines a trust state for traffic classified through the class
policy-map configuration or the class-map global configuration
command.
Catalyst 2960 Switch Command Reference
police
2-261