Content

| 8.4 |  | Policing and Marking |
| 8.4.7 |  | Configuring classification using CAR |

This example shows how to create a policy map using CAR and attach it to an ingress interface. In the configuration, an IP standard ACL permits traffic from network 10.1.0.0. For traffic matching this classification, the DSCP value in the incoming packet is trusted. If the matched traffic exceeds an average traffic rate of 48000 bps and a normal burst size of 8000 bytes, its DSCP is marked down, based on the previously defined policed-DSCP map and sent:

> Switch(config)#access-list 1 permit 10.1.0.0 0.0.255.255
> Switch(config)#class-map ipclass1
> Switch(config-cmap)#match access-group 1
> Switch(config-cmap)#exit
> Switch(config)#policy-map flow1t
> Switch(config-pmap)#class ipclass1
> Switch(config-pmap-c)#trust dscp
> Switch(config-pmap-c)#police 48000 8000 exceed-action policed-dscp-transmit
> Switch(config-pmap-c)#exit
> Switch(config-pmap)#exit
> Switch(config)#interface gigabitethernet0/1
> Switch(config-if)#service-policy input flow1t