Cisco Catalyst 3750 Software Configuration Manual page 536

Configuring Standard QoS
Command
Step 9 interface interface-id
Step 10
service-policy input policy-map-name
Step 11 end
Step 12 show policy-map [policy-map-name [class
class-map-name]]
Step 13
copy running-config startup-config
To delete an existing policy map, use the no policy-map policy-map-name global configuration
command. To delete an existing class, use the no class class-name policy-map configuration command.
To return to the untrusted state, use the no trust policy-map class configuration command. To remove
an assigned DSCP or IP precedence value, use the no set {ip dscp new-dscp | ip precedence
new-precedence} policy-map class configuration command. To remove an existing policer, use the no
police rate-bps burst-byte [exceed-action {drop | policed-dscp-transmit}] policy-map class
configuration command. To remove the policy map and interface association, use the no service-policy
input policy-map-name interface configuration command.
This example shows how to create an ingress policy-map and attach it to a port. In the configuration, the
IP standard ACL permits traffic from network 10.1.0.0. For traffic matching this classification, the DSCP
value in the inbound packet is trusted. If the matched traffic exceeds an average traffic rate of 48000 bps
and a normal burst size of 8000 bytes, its DSCP is marked down (based on the policed-DSCP map) and
sent.
Switch(config)# access-list 1 permit 10.1.0.0 0.0.255.255
Switch(config)# class-map ipclass1
Switch(config-cmap)# match access-group 1
Switch(config-cmap)# exit
Switch(config)# policy-map flow1t
Switch(config-pmap)# class ipclass1
Switch(config-pmap-c)# trust dscp
Switch(config-pmap-c)# police 48000 8000 exceed-action policed-dscp-transmit
Switch(config-pmap-c)# exit
Switch(config-pmap)# exit
Switch(config)# interface gigabitethernet1/0/1
Switch(config-if)# service-policy input flow1t
This example shows how to create a Layer 2 MAC ACL with two permit statements and attach it to a
port. The first permit statement allows traffic from the host with MAC address 0001.0000.0001 destined
for the host with MAC address 0002.0000.0001. The second permit statement allows only Ethertype
XNS-IDP traffic from the host with MAC address 0001.0000.0002 destined for the host with MAC
address 0002.0000.0002.
Switch(config)# mac access-list extended maclist1
Switch(config-ext-mac)# permit 0001.0000.0001 0.0.0 0002.0000.0001 0.0.0
Switch(config-ext-mac)# permit 0001.0000.0002 0.0.0 0002.0000.0002 0.0.0 xns-idp
Switch(config-ext-mac)# exit
Switch(config)# mac access-list extended maclist2
Switch(config-ext-mac)# permit 0001.0000.0003 0.0.0 0002.0000.0003 0.0.0
Switch(config-ext-mac)# permit 0001.0000.0004 0.0.0 0002.0000.0004 0.0.0 aarp
Switch(config-ext-mac)# exit
Catalyst 3750 Metro Switch Software Configuration Guide
26-56
Purpose
Specify the port to attach to the policy map, and enter interface
configuration mode.
Valid interfaces include physical ports.
Specify the ingress policy-map name, and apply it to a port.
Only one policy map per port is supported.
Return to privileged EXEC mode.
Verify your entries.
(Optional) Save your entries in the configuration file.
Chapter 26 Configuring QoS
78-15870-01