Catalyst 3750-E and 3560-E Switch Cisco IOS ... - DNIP . NET

policy-mapChapter 2Catalyst 3750-E and 3560-E Switch Cisco IOS CommandsYou can apply a nonhierarchical policy maps to physical ports or to SVIs. A nonhierarchical policy mapis the same as a port-based policy maps in Catalyst 3750 and 3560 switches. However, you can onlyapply a hierarchical policy map to SVIs.A hierarchical policy map has two levels. The first level, the VLAN level, specifies the actions to betaken against a traffic flow on an SVI. The second level, the interface level, specifies the actions to betaken against the traffic on the physical ports that belong to the SVI and are specified in theinterface-level policy map.In a primary VLAN-level policy map, you can only configure the trust state or set a new DSCP or IPprecedence value in the packet. In a secondary interface-level policy map, you can only configureindividual policers on physical ports that belong to the SVI.After the hierarchical policy map is attached to an SVI, an interface-level policy map cannot be modifiedor removed from the hierarchical policy map. A new interface-level policy map also cannot be added tothe hierarchical policy map. If you want these changes to occur, the hierarchical policy map must firstbe removed from the SVI.For more information about hierarchical policy maps, see the “Policing on SVIs” section in the“Configuring QoS” chapter of the software configuration guide for this release.ExamplesThis example shows how to create a policy map called policy1. When attached to the ingress port, itmatches all the incoming traffic defined in class1, sets the IP DSCP to 10, and polices the traffic at anaverage rate of 1 Mb/s and bursts at 20 KB. Traffic exceeding the profile is marked down to a DSCPvalue gotten from the policed-DSCP map and then sent.Switch(config)# policy-map policy1Switch(config-pmap)# class class1Switch(config-pmap-c)# set dscp 10Switch(config-pmap-c)# police 1000000 20000 exceed-action policed-dscp-transmitSwitch(config-pmap-c)# exitThis example shows how to configure multiple classes in a policy map called policymap2:Switch(config)# policy-map policymap2Switch(config-pmap)# class class1Switch(config-pmap-c)# set dscp 10Switch(config-pmap-c)# police 100000 20000 exceed-action policed-dscp-transmitSwitch(config-pmap-c)# exitSwitch(config-pmap)# class class2Switch(config-pmap-c)# trust dscpSwitch(config-pmap-c)# police 100000 20000 exceed-action dropSwitch(config-pmap-c)# exitSwitch(config-pmap)# class class3Switch(config-pmap-c)# set dscp 0 (no policer)Switch(config-pmap-c)# exitThis example shows how to create a hierarchical policy map and attach it to an SVI:Switch(config)# class-map cm-non-intSwitch(config-cmap)# match access-group 101Switch(config-cmap)# exitSwitch(config)# class-map cm-non-int-2Switch(config-cmap)# match access-group 102Switch(config-cmap)# exitSwitch(config)# class-map cm-test-intSwitch(config-cmap)# match input-interface gigabitethernet2/0/2 - gigabitethernet2/0/3Switch(config-cmap)# exitSwitch(config)# policy-map pm-test-intSwitch(config-pmap)# class cm-test-intSwitch(config-pmap-c)# police 18000000 8000 exceed-action drop2-432Catalyst 3750-E and 3560-E Switch Command ReferenceOL-9776-08