Policing And Marking - Cisco WS-CBS3032-DEL Software Configuration Manual

Chapter 37 Configuring QoS
You create and name a policy map by using the policy-map global configuration command. When you
enter this command, the switch enters the policy-map configuration mode. In this mode, you specify the
actions to take on a specific traffic class by using the class, trust, or set policy-map configuration and
policy-map class configuration commands.
The policy map can contain the police and police aggregate policy-map class configuration commands,
which define the policer, the bandwidth limitations of the traffic, and the action to take if the limits are
exceeded.
To enable the policy map, you attach it to a port by using the service-policy interface configuration
command.
You can apply a nonhierarchical policy map to a physical port or an SVI. However, a hierarchical policy
map can only be applied to an SVI. A hierarchical policy map contains two levels. The first level, the
VLAN level, specifies the actions to be taken against a traffic flow on the SVI. The second level, the
interface level, specifies the actions to be taken against the traffic on the physical ports that belong to the
SVI. The interface-level actions are specified in the interface-level policy map.
For more information, see the
information, see the

Policing and Marking

After a packet is classified and has a DSCP-based or CoS-based QoS label assigned to it, the policing
and marking process can begin as shown in
Policing involves creating a policer that specifies the bandwidth limits for the traffic. Packets that exceed
the limits are out of profile or nonconforming. Each policer decides on a packet-by-packet basis whether
the packet is in or out of profile and specifies the actions on the packet. These actions, carried out by the
marker, include passing through the packet without modification, dropping the packet, or modifying
(marking down) the assigned DSCP of the packet and allowing the packet to pass through. The
configurable policed-DSCP map provides the packet with a new DSCP-based QoS label. For information
on the policed-DSCP map, see the
the same queues as the original QoS label to prevent packets in a flow from getting out of order.
All traffic, regardless of whether it is bridged or routed, is subjected to a policer, if one is configured.
Note
As a result, bridged packets might be dropped or might have their DSCP or CoS fields modified when
they are policed and marked.
You can configure policing (either individual or aggregate policers) on a physical port or an SVI. For
more information about configuring policing on physical ports, see the
section on page
map and can define an individual policer only in the secondary interface-level policy map. For more
information, see the
After you configure the policy map and policing actions, attach the policy to an ingress port or SVI by
using the service-policy interface configuration command. For configuration information, see the
"Classifying, Policing, and Marking Traffic on Physical Ports by Using Policy Maps" section on
page
Maps" section on page
Policers" section on page
OL-13270-06
"Policing and Marking" section on page
"Configuring a QoS Policy" section on page
37-10. When configuring policy maps on an SVI, you can create a hierarchical policy
"Policing on SVIs" section on page
37-59, the "Classifying, Policing, and Marking Traffic on SVIs by Using Hierarchical Policy
37-64, and the
37-72.
Cisco Catalyst Blade Switch 3130 and 3032 for Dell Software Configuration Guide
Figure 37-4.
"Mapping Tables" section on page
37-11.
"Classifying, Policing, and Marking Traffic by Using Aggregate
Understanding QoS
37-9. For configuration
37-48.
37-13. Marked-down packets use
"Policing on Physical Ports"
37-9