Cisco WS-SUP32-GE-3B Software Configuration Guide - Page 592

Configuring PFC QoS Chapter 38 Configuring PFC QoS When configuring an entry in an ARP ACL for QoS filtering, note the following information: • This publication describes the ARP ACL syntax that is supported in hardware by the PFC3B. Any other ARP ACL syntax displayed by the CLI help when you enter a question mark ("?") is not supported and cannot be used to filter ARP traffic for QoS. • ACLs entries are scanned in the order you enter them. The first matching entry is used. To improve performance, place the most commonly used entries near the beginning of the ACL. • An implicit deny ip any mac any entry exists at the end of an ACL unless you include an explicit permit ip any mac any entry at the end of the list. • All new entries to an existing list are placed at the end of the list. You cannot add entries to the middle of a list. This example shows how to create an ARP ACL named arp_filtering that only permits ARP traffic from IP address 1.1.1.1: Router(config)# arp access-list arp_filtering Router(config-arp-nacl)# permit ip host 1.1.1.1 mac any Configuring a Class Map These sections describe class map configuration: • Creating a Class Map, page 38-58 • Class Map Filtering Guidelines and Restrictions, page 38-58 • Configuring Filtering in a Class Map, page 38-59 Creating a Class Map To create a class map, perform this task: Command Router(config)# class-map class_name Router(config)# no class-map class_name Purpose Creates a class map. Deletes a class map. Class Map Filtering Guidelines and Restrictions When configuring class map filtering, follow these guidelines and restrictions: • PFC QoS supports multiple match criteria in class maps configured with the match-any keywords. • When multiple match access-group ACLs are included in a match-any class map, and one ACL contains a deny entry, all match criteria after the deny entry (either in the same ACL or in different ACLs) will not be installed in the TCAM. In the following example, ACLs acl4 and acl5 will not be installed because they follow acl3, which contains a deny ip any any entry: ip access-list ext acl3 deny ip any any class-map cmap1 match access-group acl1 match access-group acl2 match access-group acl3 match access-group acl4 38-58 Catalyst Supervisor Engine 32 PISA Cisco IOS Software Configuration Guide, Release 12.2ZY OL-11439-03