Cisco Systems 3560 Manual De Usuario

When configuring policing on an SVI, you can create and configure a hierarchical policy map with these 
two levels:

VLAN level—Create this primary level by configuring class maps and classes that specify the port 
trust state or set a new DSCP or IP precedence value in the packet. The VLAN-level policy map 
applies only to the VLAN in an SVI and does not support policers. 

Interface level—Create this secondary level by configuring class maps and classes that specify the 
individual policers on physical ports the belong to the SVI. The interface-level policy map only 
supports individual policers and does not support aggregate policers. Beginning with Cisco IOS 
Release 12.2(25)SED, you can configure different interface-level policy maps for each class defined 
in the VLAN-level policy map.

See the 

 for an example of a hierarchical policy map.

 shows the policing and marking process when hierarchical policy maps on an SVI.

92355

Yes

Yes

No

No

Pass

through

Drop

Mark

Get the VLAN and

interface-level classification

results for the packet.

Is an interface-level policer

configured for this packet?

Verify if the packet is in the

profile by querying the policer.

Verify the out-of-profile action

configured for this policer.

Drop packet.

Modify DSCP according to the

policed-DSCP map. Generate

a new QoS label.

Start

Done