Specifications
2-43
Catalyst 4500 Se ries S wit ch C is co IO S C om mand R efer ence —Re lease I OS XE 3 .3.0 XO(1 5.1 (1)XO)
OL_28738-01
Chapter 2 Cisco IOS Commands for the Catalyst 4500 Series Switches
auto qos classify police
auto qos clas sify police
To police traffic form an untrusted interface, use the auto qos classify police interface command.
auto qos classify police
Syntax Description This command has no arguments or keywords.
Defaults This command has no default settings.
Command Modes Interface configur ation mode
Usage Guidelines This command generates a QoS configuration for untrusted interfaces. It places a service-policy to
classify the traffic arriving from the se untrusted desktops or devices and marks them acco rdingly. The
generated service-policie s police and either mar k-down or drop packets.
Global Level Commands Generated
Auto QoS srn4 commands, once applied to an interface, generate one or more of the following templates
(A, B, and C) at the global configuration l evel. Typically, a command generate s a series of class-maps
that either match on ACLs or on DSCP or CoS values to differentiate traffic into application classes. An
input policy is generat ed that ma tches t he genera ted classes , sets qos -groups on the cla sses, an d in some
cases, polices the classes to a set bandwidth. (A qos-group is merely a numerical tag that allows different
application classes to be treated as one unit. Outside the switch’s context, it has no significance.)
Furthermore, eight egress- queue class-maps are gene rated, matching the qos-groups set in the input
policy. The actual egress output policy assigns a queue to each one of these eight egress-queue
class-maps.
The commands generate the following templates as needed. For example, on initial use of the a new
command, global configurati ons that define the eight queue egress service-polic y are generated
(template C, below) . Sub sequently, auto qos commands applied to other interfaces do not generate
templates for egress queuing because all auto qos commands rely on the same eight queue model after
migration, and they will have already been generated from the first use of the command.
The global templates are defined in A, B, C.
A. Template for ACLs and application classes used by the auto qos classify police command
ip access-list extended AutoQos-4.0-ACL-Multimedia-Conf
permit udp any any range 16384 32767
ip access-list extended AutoQos-4.0-ACL-Signaling
permit tcp any any range 2000 2002
permit tcp any any range 5060 5061
permit udp any any range 5060 5061
ip access-list extended AutoQos-4.0-ACL-Transactional-Data
permit tcp any any eq 443
permit tcp any any eq 1521
permit tcp any any eq 1521
permit udp any any eq 1521
permit tcp any any eq 1526
permit udp any any eq 1526
permit tcp any any eq 1575
permit udp any any eq 1575