1-11
Cisco ASA Series Firewall CLI Configuration Guide
Chapter1 Configuring a Service Policy Using the Modular Policy Framework
Task Flows for Configuring Service Policies
See the “Defining Actions (Layer 3/4 Policy Map)” section on page 1-15 and the “Applying Actions to
an Interface (Service Policy)” section on page 1-17.
Task Flow for Configuring Hierarchical Policy Maps for QoS Traffic Shaping
If you enable QoS traffic shaping for a class map, then you can optionally enable priority queueing for
a subset of shaped traffic. To do so, you need to create a policy map for the priority queueing, and then
within the traffic shaping policy map, you can call the priority class map. Only the traffic shaping class
map is applied to an interface.
See Chapter 23, “Information About QoS,” for more information about this feature.
Hierarchical policy maps are only supported for traffic shaping and priority queueing.
To implement a hierarchical policy map, perform the following steps:
Step1 Identify the prioritized traffic according to the “Identifying Traffic (Layer 3/4 Class Maps)” section on
page 1-12.
You can create multiple class maps to be used in the hierarchical policy map.
Step2 Create a policy map according to the “Defining Actions (Layer 3/4 Policy Map)” section on page1-15,
and identify the sole action for each class map as priority.
Step3 Create a separate policy map according to the “Defining Actions (Layer 3/4 Policy Map)” section on
page 1-15, and identify the shape action for the class-default class map.
Inspection
Connection Limits
Layer 3/4 Policy Map
Service Policy
IPS
Inspection
Connection Limits
241508