42-70
Cisco7600 Series Router Cisco IOS Software Configuration Guide, Release 12.2SX
OL-4266-08
Chapter42 Con figuring PFC QoS
Configuring PFCQoS
With a PFC3 and Release 12.2(18)SXD and later releases, you can configure named ACLs that filter
ARP traffic (EtherType 0x0806) for QoS.
To configure an ARP ACL for QoS filtering, perform this task:
When configuring an entry in an ARP ACL for QoS filtering, note the following information:
This publication describes the ARP ACL syntax that is supported in hardware by the PFC3. Any
other ARP ACL syntax displayed by the CLI help when you enter a question mark (“?”) is not
supported and cannot be used to filter ARP traffic for QoS.
ACLs entries are scanned in the order you enter them. The first matching entry is used. To improve
performance, place the most commonly used entries near the beginning of the ACL.
An implicit deny ip any mac any entry exists at the end of an ACL unless you include an explicit
permit ip any mac any entry at the end of the list.
All new entries to an existing list are placed at the end of the list. You cannot add entries to the
middle of a list.
This example shows how to create an ARP ACL named arp_filtering that only permits ARP traffic from
IP address 1.1.1.1:
Router(config)# arp access-list arp_filtering
Router(config-arp-nacl)# permit ip host 1.1.1.1 mac any
Configuring a Class Map
These sections describe class map configuration:
Creating a Class Map, page 42-70
Class Map Filtering Guidelines and Restrictions, page 42-71
Configuring Filtering in a Class Map, page 42-71

Creating a Class Map

To create a class map, perform this task:
Command Purpose
Step1 Router(config)# arp access-list list_name Configures an ARP ACL for QoS filtering.
Router(config)# no arp access-list list_name Deletes an ARP ACL.
Step2 Router(config-arp-nacl)# {permit | deny} {ip {any
| host sender_ip | sender_ip
sender_ip_wildcardmask} mac any
Configures an access control entry (ACE) in an ARP ACL
for QoS filtering.
Router(config-arp-nacl)# no {permit | deny} {ip
{any | host sender_ip | sender_ip
sender_ip_wildcardmask} mac any
Deletes an ACE from an ARP ACL.
Command Purpose
Router(config)# class-map class_name Creates a class map.
Router(config)# no class-map class_name Deletes a class map.