Cisco Systems 3130 Classifying, Policing, and Marking Traffic on SVIs by Using Hierarchical Policy Maps

36-52
Cisco Catalyst Blade Switch 3130 for Dell Software Configuration Guide
OL-13270-01
Chapter36 Co nf iguring QoS
Configuring Standard QoS
Switch(config-ext-mac)# exit
Switch(config)# class-map macclass1
Switch(config-cmap)# match access-group maclist1
Switch(config-cmap)# exit
Switch(config)# policy-map macpolicy1
Switch(config-pmap)# class macclass1
Switch(config-pmap-c)# set dscp 63
Switch(config-pmap-c)# exit
Switch(config-pmap)# class macclass2 maclist2
Switch(config-pmap-c)# set dscp 45
Switch(config-pmap-c)# exit
Switch(config-pmap)# exit
Switch(config)# interface gigabitethernet1/0/1
Switch(config-if)# mls qos trust cos
Switch(config-if)# service-policy input macpolicy1
Classifying, Policing, and Marking Traffic on SVIs by Using Hierarchical Policy Maps
You can configure hierarchical policy maps on SVIs, but not on other types of interfaces. Hierarchical
policing combines the VLAN- and interface-level policy maps to create a single policy map.
On an SVI, the VLAN-level policy map specifies which traffic class to act on. Actions can include
trusting the CoS, DSCP, or IP precedence values or setting a specific DSCP or IP precedence value in
the traffic class. Use the interface-level policy map to specify the physical port s th at are affect ed by
individual policers.
Follow these guidelines when configuring hierarchical policy maps:
•Before configuring a hierarchical policy map, you must enable VLAN-based QoS on the physical
ports that are to be specified at the interface level of the policy map.
•You can attach only one policy map per ingress port or SVI.
•A policy map can contain multiple class statements, each with different match criteria and actions.
•A separate policy-map class can exist for each type of traffic received on the SVI.
•If you configure the IP-precedence-to-DSCP map by using the mls qos map ip-prec-dscp
dscp1...dscp8 global configuration command, the settings only affect packets on ing ress i nte rface s
that are configured to trust the IP precedence value. In a policy map, if you set the packet IP
precedence value to a new value by using the set ip precedence new-precedence policy-map class
configuration command, the egress DSCP valu e is n ot affected by the IP-precedence-to-DSCP map.
If you want the egress DSCP value to be different than the ingress value, use the set dscp new-dscp
policy-map class configuration command.
•If you enter or have used the set ip dscp command, the switch changes this command to set dscp in
its configuration. If you enter the set ip dscp command, this setting appears as set dscp in the switch
configuration.
•You can use the set ip precedence or the set precedence policy-map class configuration command
to change the packet IP precedence value. This setting appears as set ip precedence in the switch
configuration.
•If VLAN-based QoS is enabled, the hierarchical policy map supersedes the previously configured
port-based policy map.
•The hierarchical policy map is attached to the SVI and affects all traffic belonging to the VLAN.
The actions specified in the VLAN-level policy map affect the traffic belonging to the SVI. The
police action on the port-level policy map affects the ingress traffic on the affected physical
interfaces.