20-28
Catalyst 3550 Multilayer Switch Software Configuration Guide
78-11194-03
Chapter20 Co nf iguring QoS
Configuring QoS
Beginning in privileged EXEC mode, follow these steps to create an IP extended ACL for IP traffic:
To delete an access list, use the no access-list access-list-number global configuration command.
This example shows how to create an ACL that permits IP traffic from any source to any destination that
has the DSCP value set to 32:
Switch(config)# access-list 100 permit ip any any dscp 32
This example shows how to create an ACL that permits IP traffic from a source host at 10.1.1.1 to a
destination host at 10.1.1.2 with a precedence value of 5:
Switch(config)# access-list 100 permit ip host 10.1.1.1 host 10.1.1.2 precedence 5
Command Purpose
Step1 configure terminal Enter global configuration mode.
Step2 mls qos Enable QoS on the switch.
Step3 access-list access-list-number {deny |
permit} protocol source source-wildcard
destination destination-wildcard
Create an IP extended ACL, repeating the com ma nd as m any tim e s as
necessary.
•For access-list-number, enter the access list number. The range is
100 to 199 and 2000 to 2699.
•Use the permit keyword to permit a certain type of traffic if the
conditions are matched. Use the deny keyword to deny a certain
type of traffic if conditions are matched.
•For protocol, enter the name or number of an IP protocol. Use the
question mark (?) to see a list of available protocol keyw ords.
•For source, enter the network or host from which the packet is
being sent. You specify this by using dotted decimal notation, by
using the any keyword as an abbreviation for source 0.0.0.0
source-wildcard 255.255.255.255, or by using the host keyword
for source 0.0.0.0.
•For source-wildcard, enter the wildcard bits by placing ones in the
bit positions that you want to ignore. You specify the wildcard by
using dotted decimal notation, by using the any keyword as an
abbreviation for source 0.0.0.0 source-wildcard 255.255.255.255,
or by using the host keyword for source 0.0.0.0.
•For destination, enter the network or host to which the packet is
being sent. You have the same options for specifying the
destination and destination-wildcard as those described by source
and source-wildcard.
Note When creating an access list, remember that, by defaul t, the end
of the access list contains an implicit deny statement for
everything if it did not find a match before reaching t he e nd.
Step4 end Return to privileged EXEC mode.
Step5 show access-lists Verify your entries.
Step6 copy running-config startup-config (Optional) Save your entries in the configuration file.