Cisco Catalyst 3650 Series

If you enter the match-any keyword, you can only use it to specify an extended named access control list
(ACL) with the match access-group class-map configuration command.
To define packet classification on a physical-port basis, only one match command per class map is supported.
The ACL can have multiple access control entries (ACEs).
Examples
This example shows how to configure the class map called class1 with one match criterion, which is an access
list called 103:
Device(config)# access-list 103 permit ip any any dscp 10
Device(config)# class-map class1
Device(config-cmap)# match access-group 103
Device(config-cmap)# exit
This example shows how to delete the class map class1:
Device(config)# no class-map class1
You can verify your settings by entering the show class-map privileged EXEC command.
Command Reference, Cisco IOS XE Everest 16.5.1a (Catalyst 3650 Switches)
646
class-map