Specifications

2-493
Catalyst 4500 Se ries S wit ch C is co IO S C om mand R efer ence —Re lease I OS XE 3 .3.0 XO(1 5.1 (1)XO)
OL_28738 -01
Chapter 2 Cisco IOS Commands for the Catalyst 4500 Series Switches
service-policy input (control-plane)
service-pol icy input (c ontrol-plane)
To attach a policy map to a control plane for aggregate control plane services, use the service-policy
input command. Use the no form of this command to remove a service policy from a control plane.
service-policy input policy-map-name
Syntax Description
Defaults No service policy is specified.
Command Modes Control-plane configuration mode
Usage Guidelines In this release, the only policy-map accepted on the control-plane is system-cpp-policy. It is already
attached to the control-plane at start up. If not (due to some error conditions), it is recommended to use
the global macro system-cpp command to attach it to the control-plane. The system-cpp-policy created
by the system contains system predefined classes. For these predefined classes, you can change the
policing parameters but you should not m ake any other change to the cla sses.
You can define your own class-maps and append them t o the end of the system-cpp- policy policy-map.
Examples This example shows how to configure trusted hosts with source addresse s 10.1.1.1 and 10.1.1.2 t o
forward Telnet packets to the control plane without constraint, while allowing all remaining Telnet
packets to be policed at the specified rate:
Switch(config)# access-list 140 deny tcp host 10.1.1.1 any eq telnet
! Allow 10.1.1.2 trusted host traffic.
Switch(config)# access-list 140 deny tcp host 10.1.1.2 any eq telnet
! Rate limit all other Telnet traffic.
Switch(config)# access-list 140 permit tcp any any eq telnet
! Define class-map “telnet-class.”
Switch(config)# class-map telnet-class
Switch(config-cmap)# match access-group 140
Switch(config-cmap)# exit
Switch(config)# policy-map control-plane-policy
Switch(config-pmap)# class telnet-class
Switch(config-pmap-c)# police 80000 conform transmit exceed drop
Switch(config-pmap-c)# exit
Switch(config-pmap)# exit
! Define aggregate control plane service for the active Route Processor.
Switch(config)# control-plane
Switch(config-cp)# service-policy input control-plane-policy
Switch(config-cp)# exit
input Applies the specified service policy to the packets that are entering the
control plane.
policy-map-name Name of a service policy map (created using the policy-map command) to
be attached.