Cisco Systems 3750E Service-policy input policy-map-name, Show policy-map policy-map-nameclass

Chapter 36 Configuring QoS

Configuring Standard QoS

	Command		Purpose
Step 8	exit		Return to policy map configuration mode.
Step 9	exit		Return to global configuration mode.
Step 10	interface interface-id		Specify the port to attach to the policy map, and enter interface
			configuration mode.
			Valid interfaces include physical ports.
Step 11	service-policy input policy-map-name		Specify the policy-map name, and apply it to an ingress port.
			Only one policy map per ingress port is supported.
Step 12	end		Return to privileged EXEC mode.
Step 13 show policy-map [policy-map-name[class			Verify your entries.
	class-map-name]]
Step 14	copy running-config startup-config		(Optional) Save your entries in the configuration file.
		To delete an existing policy map, use the no policy-mappolicy-map-nameglobal configuration
		command. To delete an existing class map, use the no class class-map-namepolicy-map configuration
		command. To return to the untrusted state, use the no trust policy-map configuration command. To
		remove an assigned DSCP or IP precedence value, use the no set {dscp new-dscp ip precedence
		new-precedence} policy-map configuration command. To remove an existing policer, use the no police
		rate-bpsburst-byte[exceed-action {drop policed-dscp-transmit}]policy-map configuration
		command. To remove the policy map and port association, use the no service-policy input
		policy-map-nameinterface configuration command.
		This example shows how to create a policy map and attach it to an ingress port. In the configuration, the
		IP standard ACL permits traffic from network 10.1.0.0. For traffic matching this classification, the
		DSCP value in the incoming packet is trusted. If the matched traffic exceeds an average traffic rate
		of 48000 b/s and a normal burst size of 8000 bytes, its DSCP is marked down (based on the
		policed-DSCP map) and sent:
		Switch(config)# access-list 1 permit 10.1.0.0 0.0.255.255
		Switch(config)# class-map ipclass1
		Switch(config-cmap)# match access-group 1
		Switch(config-cmap)# exit
		Switch(config)# policy-map flow1t
		Switch(config-pmap)# class ipclass1
		Switch(config-pmap-c)# trust dscp
		Switch(config-pmap-c)#police 1000000 8000 exceed-action policed-dscp-transmit
		Switch(config-pmap-c)# exit
		Switch(config-pmap)# exit
		Switch(config)# interface gigabitethernet2/0/1
		Switch(config-if)#service-policy input flow1t
		This example shows how to create a Layer 2 MAC ACL with two permit statements and attach it to an
		ingress port. The first permit statement allows traffic from the host with MAC address 0001.0000.0001
		destined for the host with MAC address 0002.0000.0001. The second permit statement allows only
		Ethertype XNS-IDP traffic from the host with MAC address 0001.0000.0002 destined for the host with
		MAC address 0002.0000.0002.
		Switch(config)# mac access-list extended maclist1
		Switch(config-ext-mac)#permit 0001.0000.0001 0.0.0 0002.0000.0001 0.0.0
		Switch(config-ext-mac)#permit 0001.0000.0002 0.0.0 0002.0000.0002 0.0.0 xns-idp
		Switch(config-ext-mac)# exit
		Switch(config)# mac access-list extended maclist2
		Switch(config-ext-mac)#permit 0001.0000.0003 0.0.0 0002.0000.0003 0.0.0
		Switch(config-ext-mac)#permit 0001.0000.0004 0.0.0 0002.0000.0004 0.0.0 aarp
		Catalyst 3750-E and 3560-E Switch Software Configuration Guide
36-54			OL-9775-02