Users Guide

5 Apply the qos-type policy-map globally or to an interface. In this example, the policy-map is applied to an interface.
OS10# configure terminal
OS10(config)# interface ethernet 1/1/14
OS10(conf-if-eth1/1/14)# service-policy input type qos example-pmap-cos
If the trac that arrives at the interface matches the 802.1p criteria that you have congured, it is assigned to TC 3 or qos group 3.
ACL-based classication with trust
This section describes how to congure ACL based classication when you congure trust-based classication.
You can congure ACL-based classication when trust-based classication is congured. If the trac matches the criteria congured in
both the ACL-based and trust-based classication, fallback trust resolves the conict.
1 Create a user dened dscp or dot1p trust-map.
OS10(config)# trust dscp-map userdef-dscp
OS10(config-tmap-dscp-map)# qos-group 3 dscp 15
OS10(config-tmap-dscp-map)# qos-group 5 dscp 30
2 Apply user-dened trust map to an interface or in system QoS.
OS10(conf-if-eth1/1/1)# trust-map dscp userdef-dscp
or
OS10(config)# system qos
OS10(config-sys-qos)# trust-map dscp userdef-dscp
3 Create a class-map and attach it to a policy where fallback trust is congured. This example uses 802.1p cos to dene the match
criteria. You can use dscp or other access group match lters. If the 802.1p trac matches the dened criteria, the set qos-group
1
command assigns the trac to TC 1.
OS10(config)# class-map type qos example-class-map
OS10(config-cmap-qos)# match cos 1
OS10(config-cmap-qos)# exit
OS10(config)# policy-map type qos example-policy-map
OS10(config-pmap-qos)# class example-class-map
OS10(config-pmap-c-qos)# set qos-group 1
4 Attach the policy map to an interface or in system QoS mode.
OS10(config)# interface ethernet 1/1/1
OS10(conf-if-eth1/1/1)# service-policy input type qos example-policy-map
or
OS10(config)# system qos
OS10(config-sys-qos)# service-policy input type qos example-policy-map
Control-plane policing
Control-plane policing (CoPP) increases security on the system by protecting the route processor from unnecessary trac and giving
priority to important control plane and management trac. CoPP uses a dedicated control plane conguration through the QoS CLIs to set
rate-limiting capabilities for control plane packets.
If the rate of control packets towards the CPU is higher than the packet rate that the CPU can handle, CoPP provides a method to
selectively drop some of the control trac so that the CPU can process high-priority control trac. You can use CoPP to rate-limit trac
through each CPU port queue of the network processor (NPU).
CoPP applies policy actions on all control-plane trac. The control-plane class map does not use any match criteria. To enforce rate-limiting
or rate policing on control-plane trac, create policy maps. You can use the control-plane command to attach the CoPP service
policies directly to the control-plane.
Quality of service
1121