From: A.G. Ananth Sarma (GMail) (ananth.sarma@gmail.com)
Date: Fri May 02 2008 - 07:00:06 ART
Hi Shine,
Good explanation.
(The following is extracted from the same Cisco document).
1. Can you expalin the line below highlighted in Yellow? It says only one
match command per class map is supported.
Step 3
*class-map* [*match-all* | *match-any*] *class-map-name*
Create a class map, and enter class-map configuration mode.
By default, no class maps are defined.
(Optional) Use the *match-all* keyword to perform a logical-AND of all
matching statements under this class map. All match criteria in the class
map must be matched.
(Optional) Use the *match-any* keyword to perform a logical-OR of all
matching statements under this class map. One or more match criteria must be
matched.
For *class-map-name*, specify the name of the class map.
If neither the *match-all* or *match-any* keyword is specified, the default
is *match-all*.
*Note *Because only one *match* command per class map is supported, the *
match-all* and *match-any* keywords function the same.
2. Also, in the following example, where does the 1000000 come from? I could
not understand how the 1000000 and 48000 b/s are related.
"*This example shows how to create a policy map and attach it to an ingress
port. In the configuration, the IP standard ACL permits traffic from network
10.1.0.0. For traffic matching this classification, the DSCP value in the
incoming packet is trusted. If the matched traffic exceeds an average
traffic rate of 48000 b/s and a normal burst size of 8000 bytes, its DSCP is
marked down (based on the policed-DSCP map) and sent:*
Switch(config)# access-list 1 permit 10.1.0.0 0.0.255.255
Switch(config)# class-map ipclass1
Switch(config-cmap)# match access-group 1
Switch(config-cmap)# exit
Switch(config)# policy-map flow1t
Switch(config-pmap)# class ipclass1
Switch(config-pmap-c)# trust dscp
Switch(config-pmap-c)# police 1000000 8000 exceed-action
policed-dscp-transmit
Switch(config-pmap-c)# exit
Switch(config-pmap)# exit
Switch(config)# interface gigabitethernet0/1
Switch(config-if)# service-policy input flow1t
May be, I am missing a point here.
Thanks for your input.
Regards,
Ananth
On Fri, May 2, 2008 at 10:14 AM, mac ccie <mac2008.ccie@gmail.com> wrote:
> Thanks Shine, it helps.
>
> Mac
>
>
> On 5/2/08, Shine <shinepjoseph@iprimus.com.au> wrote:
> >
> > Matching values on a single line means logical OR and matching on
> > different
> > lines is logical AND.
> >
> > The following two class maps mean the same. Note that, in the first
> > class-map it's matching any of the dscp values in 3 different lines and
> in
> > the second class-map it defines to match all lines, but all the values
> are
> > in a single line.
> >
> > class-map match-any XYZ
> > match ip dscp af11
> > match ip dscp 11
> > match ip dscp af12
> >
> > class-map match-all XYZ_2
> > match ip dscp af11 11 af12
> >
> > Hope this makes sense.
> >
> >
> > -----Original Message-----
> > From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
> > mac
> > ccie
> > Sent: Friday, 2 May 2008 4:25 PM
> > To: Cisco certification
> > Subject: class-map example in doc cd,is it correct?
> >
> > Hi,
> >
> > is this correct?
> >
> >
> >
> > Switch(config)# class-map class2
> >
> > Switch(config-cmap)# match ip dscp 10 11 12
> >
> > Switch(config-cmap)# end
> >
> > Switch#
> >
> >
> >
> > by default class-map is match-all and I think a single packet can not
> > have dscp of 10,11 or 12.
> >
> > is not it should be match-any?
> >
> > This was taken from doc cd
> >
> >
> >
>
http://www.cisco.com/en/US/docs/switches/lan/catalyst3560/software/release/1
> > 2.2_44_se/configuration/guide/swqos.html#wp1056668
> >
> >
> >
> > Thanks,
> >
> > Mac
> >
> >
> > Pass the CCIE in six weeks, Guaranteed!
> > http://www.certscience.com/CCIE
> > _______________________________________________________________________
> > Subscription information may be found at:
> > http://www.groupstudy.com/list/CCIELab.html
>
>
> Pass the CCIE in six weeks, Guaranteed!
> http://www.certscience.com/CCIE
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
Pass the CCIE in six weeks, Guaranteed!
http://www.certscience.com/CCIE
This archive was generated by hypermail 2.1.4 : Mon Jun 02 2008 - 06:59:15 ART