Cisco Systems IE 2000 Creating a Policy Map: Example, Creating a Layer 2 MAC ACL: Example

38-59
Cisco IE 2000 Switch Software Configuration Guide
OL-25866-01
Chapter 38 Configuring Standard QoS
Configuration Examples for Standard QoS
This example shows how to create a class map called class3, which matches incoming traffic with
IP-precedence values of 5, 6, and 7:
Switch(config)# class-map class3
Switch(config-cmap)# match ip precedence 5 6 7
Switch(config-cmap)# end
Switch#
Creating a Policy Map: Example
This example shows how to create a policy map and attach it to an ingress port. In the configuration, the
IP standard ACL permits traffic from network 10.1.0.0. For traffic matching this classification, the DSCP
value in the incoming packet is trusted. If the matched traffic exceeds an average traffic rate of 48000
b/s and a normal burst size of 8000 bytes, its DSCP is marked down (based on the policed- DSCP map)
and sent:
Switch(config)# access-list 1 permit 10.1.0.0 0.0.255.255
Switch(config)# class-map ipclass1
Switch(config-cmap)# match access-group 1
Switch(config-cmap)# exit
Switch(config)# policy-map flow1t
Switch(config-pmap)# class ipclass1
Switch(config-pmap-c)# trust dscp
Switch(config-pmap-c)# police 1000000 8000 exceed-action policed-dscp-transmit
Switch(config-pmap-c)# exit
Switch(config-pmap)# exit
Switch(config)# interface gigabitethernet1/1
Switch(config-if)# service-policy input flow1t
Creating a Layer 2 MAC ACL: Example
This example shows how to create a Layer 2 MAC ACL with two permit statements and attach it to an
ingress port. The first permit statement allows traffic from the host with MAC address 0001.0000.0001
destined for the host with MAC address 0002.0000.0001. The second permi t statement allows only
Ethertype XNS-IDP traffic from the host with MAC address 0001.0000.0002 destined for the host with
MAC address 0002.0000.0002.
Switch(config)# mac access-list extended maclist1
Switch(config-ext-mac)# permit 0001.0000.0001 0.0.0 0002.0000.0001 0.0.0
Switch(config-ext-mac)# permit 0001.0000.0002 0.0.0 0002.0000.0002 0.0.0 xns-idp
Switch(config-ext-mac)# exit
Switch(config)# mac access-list extended maclist2
Switch(config-ext-mac)# permit 0001.0000.0003 0.0.0 0002.0000.0003 0.0.0
Switch(config-ext-mac)# permit 0001.0000.0004 0.0.0 0002.0000.0004 0.0.0 aarp
Switch(config-ext-mac)# exit
Switch(config)# class-map macclass1
Switch(config-cmap)# match access-group maclist1
Switch(config-cmap)# exit
Switch(config)# policy-map macpolicy1
Switch(config-pmap)# class macclass1
Switch(config-pmap-c)# set dscp 63
Switch(config-pmap-c)# exit
Switch(config-pmap)# class macclass2 maclist2
Switch(config-pmap-c)# set dscp 45
Switch(config-pmap-c)# exit
Switch(config-pmap)# exit
Switch(config)# interface gigabitethernet1/1
Switch(config-if)# mls qos trust cos
Switch(config-if)# service-policy input macpolicy1