Policing On Svis - Cisco 3020 - Catalyst Blade Switch Configuration Manual

Understanding QoS
Figure 27-4
Check if the packet is in
profile by querying the policer.

Policing on SVIs

Before configuring a hierarchical policy map with individual policers on an SVI, you must enable
Note
VLAN-based QoS on the physical ports that belong to the SVI. Though a policy map is attached to the
SVI, the individual policers only affect traffic on the physical ports specified in the secondary interface
level of the hierarchical policy map.
A hierarchical policy map has two levels. The first level, the VLAN level, specifies the actions to be
taken against a traffic flow on an SVI. The second level, the interface level, specifies the actions to be
taken against the traffic on the physical ports that belong to the SVI and are specified in the
interface-level policy map.
When configuring policing on an SVI, you can create and configure a hierarchical policy map with these
two levels:
•
Cisco Catalyst Blade Switch 3020 for HP Software Configuration Guide
27-10
Policing and Marking Flowchart on Physical Ports
Start
Get the clasification
result for the packet.
Is a policer configured
for this packet?
Yes
Yes
Pass
through
Check out-of-profile action
configured for this policer.
Modify DSCP according to the
policed-DSCP map. Generate
Done
Interface level—Create this secondary level by configuring class maps and classes that specify the
individual policers on physical ports the belong to the SVI. The interface-level policy map only
supports individual policers and does not support aggregate policers. You can configure different
interface-level policy maps for each class defined in the VLAN-level policy map.
No
No
Drop
Mark
a new QoS label.
Chapter 27 Configuring QoS
Drop packet.
OL-8915-01