From: Shine (shinepjoseph@iprimus.com.au)
Date: Fri May 02 2008 - 10:18:17 ART
Ananth,
In the case of routers, the explanation provided earlier holds good.
In the case of switches, the class-map supports only one match statement and
that's what it says in the document provided. The switch will accept more
than one match statement in the class-map, but when you try to apply it to a
policy-map the switch rejects it.
Thanks for bringing this up.
Regarding your second question, I think it is a bug in the documentation.
Please see below link of 3550 documentation. It also has the same example,
and it used 48000 instead of 1000000.
Hope this makes sense.
_____
From: A.G. Ananth Sarma (GMail) [mailto:ananth.sarma@gmail.com]
Sent: Friday, 2 May 2008 8:00 PM
To: Shine
Cc: Cisco certification
Subject: Re: class-map example in doc cd,is it correct? More on this
Hi Shine,
Good explanation.
(The following is extracted from the same Cisco document).
1. Can you expalin the line below highlighted in Yellow? It says only one
match command per class map is supported.
Step 3
class-map [match-all | match-any] class-map-name
Create a class map, and enter class-map configuration mode.
By default, no class maps are defined.
. <http://www.cisco.com/en/US/i/templates/blank.gif> (Optional) Use the
match-all keyword to perform a logical-AND of all matching statements under
this class map. All match criteria in the class map must be matched.
. <http://www.cisco.com/en/US/i/templates/blank.gif> (Optional) Use the
match-any keyword to perform a logical-OR of all matching statements under
this class map. One or more match criteria must be matched.
. <http://www.cisco.com/en/US/i/templates/blank.gif> For class-map-name,
specify the name of the class map.
If neither the match-all or match-any keyword is specified, the default is
match-all.
Note <http://www.cisco.com/en/US/i/templates/blank.gif> Because only one
match command per class map is supported, the match-all and match-any
keywords function the same.
2. Also, in the following example, where does the 1000000 come from? I could
not understand how the 1000000 and 48000 b/s are related.
"This example shows how to create a policy map and attach it to an ingress
port. In the configuration, the IP standard ACL permits traffic from network
10.1.0.0. For traffic matching this classification, the DSCP value in the
incoming packet is trusted. If the matched traffic exceeds an average
traffic rate of 48000 b/s and a normal burst size of 8000 bytes, its DSCP is
marked down (based on the policed-DSCP map) and sent:
Switch(config)# access-list 1 permit 10.1.0.0 0.0.255.255
Switch(config)# class-map ipclass1
Switch(config-cmap)# match access-group 1
Switch(config-cmap)# exit
Switch(config)# policy-map flow1t
Switch(config-pmap)# class ipclass1
Switch(config-pmap-c)# trust dscp
Switch(config-pmap-c)# police 1000000 8000 exceed-action
policed-dscp-transmit
Switch(config-pmap-c)# exit
Switch(config-pmap)# exit
Switch(config)# interface gigabitethernet0/1
Switch(config-if)# service-policy input flow1t
May be, I am missing a point here.
Thanks for your input.
Regards,
Ananth
On Fri, May 2, 2008 at 10:14 AM, mac ccie <mac2008.ccie@gmail.com> wrote:
Thanks Shine, it helps.
Mac
On 5/2/08, Shine <shinepjoseph@iprimus.com.au> wrote:
>
> Matching values on a single line means logical OR and matching on
> different
> lines is logical AND.
>
> The following two class maps mean the same. Note that, in the first
> class-map it's matching any of the dscp values in 3 different lines and in
> the second class-map it defines to match all lines, but all the values are
> in a single line.
>
> class-map match-any XYZ
> match ip dscp af11
> match ip dscp 11
> match ip dscp af12
>
> class-map match-all XYZ_2
> match ip dscp af11 11 af12
>
> Hope this makes sense.
>
>
> -----Original Message-----
> From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
> mac
> ccie
> Sent: Friday, 2 May 2008 4:25 PM
> To: Cisco certification
> Subject: class-map example in doc cd,is it correct?
>
> Hi,
>
> is this correct?
>
>
>
> Switch(config)# class-map class2
>
> Switch(config-cmap)# match ip dscp 10 11 12
>
> Switch(config-cmap)# end
>
> Switch#
>
>
>
> by default class-map is match-all and I think a single packet can not
> have dscp of 10,11 or 12.
>
> is not it should be match-any?
>
> This was taken from doc cd
>
>
>
http://www.cisco.com/en/US/docs/switches/lan/catalyst3560/software/release/1
> 2.2_44_se/configuration/guide/swqos.html#wp1056668
>
>
>
> Thanks,
>
> Mac
>
>
> Pass the CCIE in six weeks, Guaranteed!
> http://www.certscience.com/CCIE
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
Pass the CCIE in six weeks, Guaranteed!
http://www.certscience.com/CCIE
This archive was generated by hypermail 2.1.4 : Mon Jun 02 2008 - 06:59:15 ART
