Cisco Catalyst 3550 Command Reference Manual page 311

Chapter 2 Catalyst 3550 Switch Cisco IOS Commands
Only one policy map per interface per direction is supported. You can apply the same policy map to
multiple interfaces and directions.
Per-port per-VLAN policing is not supported on routed ports or on virtual (logical) interfaces. It is
supported only on an ingress port configured as a trunk or as a static-access port.
You cannot use the service-policy interface configuration command to attach policy maps that contain
these elements to an egress interface:
•
•
•
The only match criterion in a policy map that can be attached to an egress interface is the match ip dscp
dscp-list class-map configuration command.
Examples
This example shows how to create a policy map called policy1. When attached to the ingress direction,
it matches all the incoming traffic defined in class1, sets the IP DSCP to 10, and polices the traffic at an
average rate of 1 Mbps and 20-KB bursts. Traffic exceeding the profile is marked down to a DSCP value
obtained from the policed-DSCP map and then sent.
Switch(config)# policy-map policy1
Switch(config-pmap)# class class1
Switch(config-pmap-c)# set dscp 10
Switch(config-pmap-c)# police 1000000 20000 exceed-action policed-dscp-transmit
Switch(config-pmap-c)# exit
This example shows how to configure multiple classes in a policy map called policymap2:
Switch(config)# policy-map policymap2
Switch(config-pmap)# class class1
Switch(config-pmap-c)# set dscp 10
Switch(config-pmap-c)# police 100000 20000 exceed-action policed-dscp-transmit
Switch(config-pmap-c)# exit
Switch(config-pmap)# class class2
Switch(config-pmap-c)# trust dscp
Switch(config-pmap-c)# police 100000 20000 exceed-action drop
Switch(config-pmap-c)# exit
Switch(config-pmap)# class class3
Switch(config-pmap-c)# set dscp 0 (no policer)
Switch(config-pmap-c)# exit
This example shows how to create a policy map that contains a per-port per-VLAN classification and
how to attach it to an ingress interface. A class map, called vlan_class, matches traffic received on
VLANs 10, 20 to 30, and 40 that contains IP DSCP 9 (defined in class map dscp_class). If the specified
average traffic rates and the burst sizes are exceeded, the switch drops the packet.
Switch(config)# class-map match-any dscp_class
Switch(config-cmap)# match ip dscp 9
Switch(config-cmap)# exit
Switch(config)# class-map match-all vlan_class
Switch(config-cmap)# match vlan 10 20-30 40
Switch(config-cmap)# match class-map dscp_class
Switch(config-cmap)# exit
Switch(config)# policy-map policymap2
Switch(config-pmap)# class vlan_class
Switch(config-pmap-c)# police 80000 8000 exceed-action drop
Switch(config-pmap-c)# exit
Switch(config-pmap)# exit
OL-8566-02
set or trust policy-map class configuration commands. Instead, you can use the police policy-map
class configuration command to mark down (reduce) the DSCP value at the egress interface.
Access control list (ACL) classification.
Per-port per-VLAN classification.
Catalyst 3550 Multilayer Switch Command Reference
policy-map
2-285