Cisco Catalyst 3750 - Page 457

2-427
Catalyst 3750 Switch Command Reference
OL-8552-07
Chapter 2 Catalyst 3750 Switch Cisco IOS Commands
police
Policing uses a token-bucket algorithm. You configure the bucket depth (the maximum burst that is
tolerated before the bucket overflows) by using the burst-byte option of the police policy-map class
configuration command or the mls qos aggregate-policer global configuration command. You
configure how quickly (the average rate) the tokens are removed from the bucket by using the rate-bps
option of the police policy-map class configuration command or the mls qos aggregate-policer global
configuration command. For more information, see the software configuration guide for this release.
Policy maps that have the police aggregate command fail when applied to a 10-Gigabit Ethernet
interface.
Examples This example shows how to configure a policer that drops packets if traffic exceeds 1 Mb/s average rate
with a burst size of 20 KB. The DSCPs of incoming packets are trusted, and there is no packet
modification.
Switch(config)# policy-map policy1
Switch(config-pmap)# class class1
Switch(config-pmap-c)# trust dscp
Switch(config-pmap-c)# police 1000000 20000 exceed-action drop
Switch(config-pmap-c)# exit
This example shows how to configure a policer, which marks down the DSCP values with the values
defined in policed-DSCP map and sends the packet:
Switch(config)# policy-map policy2
Switch(config-pmap)# class class2
Switch(config-pmap-c)# police 1000000 20000 exceed-action policed-dscp-transmit
Switch(config-pmap-c)# exit
You can verify your settings by entering the show policy-map privileged EXEC command.
Related Commands Command Description
class Defines a traffic classification match criteria (through the police, set,
and trust policy-map class configuration commands) for the
specified class-map name.
mls qos map policed-dscp Applies a policed-DSCP map to a DSCP-trusted port.
policy-map Creates or modifies a policy map that can be attached to multiple
ports to specify a service policy.
set Classifies IP traffic by setting a DSCP or IP-precedence value in the
packet.
show policy-map Displays quality of service (QoS) policy maps.
trust Defines a trust state for traffic classified through the class
policy-map configuration or the class-map global configuration
command.