Cisco Systems 3560 Frozen Dessert Maker User Manual


  Open as PDF
of 1288
 
34-33
Catalyst 3560 Switch Software Configuration Guide
OL-8553-06
Chapter 34 Configuring QoS
Configuring Standard QoS
Standard QoS Configuration Guidelines
Before beginning the QoS configuration, you should be aware of this information in these sections:
“QoS ACL Guidelines” section on page 34-33
“Applying QoS on Interfaces” section on page 34-33
“Policing Guidelines” section on page 34-34
“General QoS Guidelines” section on page 34-34
QoS ACL Guidelines
These are the guidelines with for configuring QoS with access control lists (ACLs):
It is not possible to match IP fragments against configured IP extended ACLs to enforce QoS. IP
fragments are sent as best-effort. IP fragments are denoted by fields in the IP header.
Only one ACL per class map and only one match class-map configuration command per class map
are supported. The ACL can have multiple ACEs, which match fields against the contents of the
packet.
A trust statement in a policy map requires multiple TCAM entries per ACL line. If an input service
policy map contains a trust statement in an ACL, the access-list might be too large to fit into the
available QoS TCAM and an error can occur when you apply the policy map to a port. Whenever
possible, you should minimize the number of lines in a QoS ACL.
Applying QoS on Interfaces
These are the guidelines with for configuring QoS on physical ports. This section also applies to SVIs
(Layer 3 interfaces):
You can configure QoS on physical ports and SVIs. When configuring QoS on physical ports, you
create and apply nonhierarchical policy maps. When configuring QoS on SVIs, you can create and
apply nonhierarchical and hierarchical policy maps.
Incoming traffic is classified, policed, and marked down (if configured) regardless of whether the
traffic is bridged, routed, or sent to the CPU. It is possible for bridged frames to be dropped or to
have their DSCP and CoS values modified.
In Cisco IOS Release 12.2(25)SE or later, follow these guidelines when configuring policy maps on
physical ports or SVIs:
You cannot apply the same policy map to a physical port and to an SVI.
If VLAN-based QoS is configured on a physical port, the switch removes all the port-based
policy maps on the port. The traffic on this physical port is now affected by the policy map
attached to the SVI to which the physical port belongs.
In a hierarchical policy map attached to an SVI, you can only configure an individual policer at
the interface level on a physical port to specify the bandwidth limits for the traffic on the port.
The ingress port must be configured as a trunk or as a static-access port. You cannot configure
policers at the VLAN level of the hierarchical policy map.
The switch does not support aggregate policers in hierarchical policy maps.