Configuring Classification Using Port Trust States; Configuring The Trust State On Ports Within The Qos Domain; Configuring The Cos Value For An Interface - Cisco 2950 - Catalyst Switch Configuration Manual

Configuring Standard QoS
Table 30-5 Interaction Between Policy Maps and Security ACLs
Policy-Map Conditions
When the packet is in profile.
When the packet is out of profile and the
out-of-profile action is to mark down the DSCP
value.
When the packet is out of profile and the
out-of-profile action is to drop the packet.

Configuring Classification Using Port Trust States

This section describes how to classify incoming traffic by using port trust states:
•
•
•
•
Both the SI and EI support this feature.
Note

Configuring the Trust State on Ports within the QoS Domain

Packets entering a QoS domain are classified at the edge of the QoS domain. When the packets are
classified at the edge, the switch port within the QoS domain can be configured to one of the trusted
states because there is no need to classify the packets at every switch within the QoS domain.
shows a sample network topology.
Catalyst 2950 and Catalyst 2955 Switch Software Configuration Guide
30-20
Configuring the Trust State on Ports within the QoS Domain, page 30-20
Configuring the CoS Value for an Interface, page 30-23
Configuring Trusted Boundary, page 30-23
Enabling Pass-Through Mode, page 30-25
Chapter 30
Security-ACL
Conditions Action
Permit specified Traffic is forwarded.
packets.
Drop specified Traffic is dropped.
packets.
Permit specified Traffic is dropped.
packets.
Drop specified Traffic is dropped.
packets.
Configuring QoS
Figure 30-4
78-11380-10