Cisco Cisco IOS Software Release 12.0 S

The hierarchical policing policy map in the left column of 

 first executes the police action of the 

nested policy map, “child,” and secondly, the main policy map, “parent.” The action invoked in the parent 
policy is the police command with only conform-action and exceed-action options specified for 
class-default traffic. The child level consists of a flat policy that can be configured with any action or 
class within the current restrictions of the hardware and the Cisco IOS release version. Thus, 
precedence 1 traffic from the customer edge router is policed to 100 megabits per second, with 
conforming packets retransmitted and remarked as precedence 3. Precedence 2 and precedence 3 traffic 
is policed to 100 megabits per second and is retransmitted, and all other traffic is policed to 200 megabits 
per second and retransmitted. 

The supported workaround in the right column of 

 simulates the functionality of the 2-level 

policing hierarchical policy. Because the rate-limit feature can police traffic, the rate-limit command 
simulates the parent level and a flat policy-map simulates the child level. The flat policy-map is always 
executed before the rate-limit command, and packets not dropped by the policy-map are then filtered by 
the rate-limit feature. Packets dropped by the policy map filters are not counted in the rate-limit 
statistics. 

policy-map parent

Class class-default

police cir 200000000 bc 100000 be 100000

exceed-action drop

service-policy child

policy-map child

class prec1

police cir 100000000 bc 3125000 be 3125000

conform-action set-prec-transmit 3

exceed-action drop

class prec2

police cir 100000000 bc 3125000 be 3125000

conform-action transmit

exceed-action drop

class prec3

police cir 100000000 bc 3125000 be 3125000

conform-action transmit

exceed-action drop

class-map match-any Prec1

Match ip precedence 1

class-map match-any Prec2

Match ip precedence 2

class-map match-any Prec3

Match ip precedence 3

interface gigabitEthernet 1/0.1 

service-policy input parent 

policy-map 3class

class prec1

police cir 100000000 bc 3125000 be 3125000

conform-action set-prec-transmit 3

exceed-action drop

class prec2

police cir 100000000 bc 3125000 be 3125000

conform-action transmit

exceed-action drop

class prec3

police cir 100000000 bc 3125000 be 3125000

conform-action transmit

exceed-action drop

class-map match-any Prec1

Match ip precedence 1

class-map match-any Prec2

Match ip precedence 2

class-map match-any Prec3

Match ip precedence 3

interface gigabitEthernet 1/0.1 

service-policy input 3class 

rate-limit input 200000000 100000 100000 

conform-action transmit exceed-action drop