Content

| 8.4 |  | Policing and Marking |
| 8.4.8 |  | Configuring policing using CAR |

In this example the policy is being strictly enforced. Rather than merely marking down the DSCP value of non conforming packets, the packets are dropped. An IP standard ACL permits traffic from network 10.1.0.0. For traffic matching this classification, the DSCP value in the incoming packet is trusted and the packet will be forwarded with the DSCP intact. If the matched traffic exceeds an average traffic rate of 48000 bps and a normal burst size of 8000 bytes, the traffic will be dropped.

> Switch(config)#access-list 1 permit 10.1.0.0 0.0.255.255
> Switch(config)#class-map ipclass1
> Switch(config-cmap)#match access-group 1
> Switch(config-cmap)#exit
> Switch(config)#policy-map flow1t
> Switch(config-pmap)#class ipclass1
> Switch(config-pmap-c)#trust dscp
> Switch(config-pmap-c)#police 48000 8000 exceed-action drop
> Switch(config-pmap-c)#exit
> Switch(config-pmap)#exit
> Switch(config)#interface gigabitethernet0/1
> Switch(config-if)#service-policy input flow1t