Service-Policy Input (Control-Plane) - Cisco Catalyst 4500 Series Command Reference Manual

service-policy input (control-plane)

service-policy input (control-plane)
To attach a policy map to a control plane for aggregate control plane services, use the service-policy
input command. Use the no form of this command to remove a service policy from a control plane.
Syntax Description
input
policy-map-name
Defaults
No service policy is specified.
Command Modes
Control-plane configuration mode
Command History Release
12.2(31)SG
Usage Guidelines
In this release, the only policy-map accepted on the control-plane is system-cpp-policy. It is already
attached to the control-plane at start up. If not (due to some error conditions), it is recommended to use
the global macro system-cpp command to attach it to the control-plane. The system-cpp-policy created
by the system contains system predefined classes. For these predefined classes, you can change the
policing parameters but you should not make any other change to the classes.
You can define your own class-maps and append them to the end of the system-cpp-policy policy-map.
Examples This example shows how to configure trusted hosts with source addresses 10.1.1.1 and 10.1.1.2 to
forward Telnet packets to the control plane without constraint, while allowing all remaining Telnet
packets to be policed at the specified rate:
Switch(config)# access-list 140 deny tcp host 10.1.1.1 any eq telnet
! Allow 10.1.1.2 trusted host traffic.
Switch(config)# access-list 140 deny tcp host 10.1.1.2 any eq telnet
! Rate limit all other Telnet traffic.
Switch(config)# access-list 140 permit tcp any any eq telnet
! Define class-map "telnet-class."
Switch(config)# class-map telnet-class
Switch(config-cmap)# match access-group 140
Switch(config-cmap)# exit
Switch(config)# policy-map control-plane-policy
Switch(config-pmap)# class telnet-class
Switch(config-pmap-c)# police 80000 conform transmit exceed drop
Switch(config-pmap-c)# exit
Switch(config-pmap)# exit
! Define aggregate control plane service for the active Route Processor.
Catalyst 4500 Series Switch Cisco IOS Command Reference—Release IOS XE 3.3.0SG and IOS 15.1(1)SG)
2-586
service-policy input policy-map-name
Applies the specified service policy to the packets that are entering the
control plane.
Name of a service policy map (created using the policy-map command) to
be attached.
Modification
Support for this command was introduced on the Catalyst 4500 series switch.
Chapter 2 Cisco IOS Commands for the Catalyst 4500 Series Switches
OL-25342 -01