Dell EMC SmartFabric OS10 User Guide Release 10.5.0

ACL-based classification with trust

This section describes how to configure ACL based classification when you configure trust-based classification.

If you configure ACL-based classification for a set of DSCP/COS values as well as trust-based classification on a particular port, the ACL-based classification takes precedence over trust-based classification.

1. Create a user defined dscp or dot1p trust-map.

   OS10(config)# trust dscp-map userdef-dscp
   OS10(config-tmap-dscp-map)# qos-group 3 dscp 15
   OS10(config-tmap-dscp-map)# qos-group 5 dscp 30
   

2. Apply user-defined trust map to an interface or in system QoS.

   OS10(conf-if-eth1/1/1)# trust-map dscp userdef-dscp 
   
   or
   
   OS10(config)# system qos
   OS10(config-sys-qos)# trust-map dscp userdef-dscp

3. Create a class-map and attach it to a policy where trust is configured. This example uses 802.1p cos to define the match criteria. You can use dscp or other access group match filters. If the 802.1p traffic matches the defined criteria, the set qos-group 1 command assigns the traffic to TC 1.

   OS10(config)# class-map type qos example-class-map
   OS10(config-cmap-qos)# match cos 1
   OS10(config-cmap-qos)# exit
   
   
   OS10(config)# policy-map type qos example-policy-map
   OS10(config-pmap-qos)# class example-class-map
   OS10(config-pmap-c-qos)# set qos-group 1
   

4. Attach the policy map to an interface or in system QoS mode.

   OS10(config)# interface ethernet 1/1/1
   OS10(conf-if-eth1/1/1)# service-policy input type qos example-policy-map
   
   or
   
   OS10(config)# system qos
   OS10(config-sys-qos)# service-policy input type qos example-policy-map
   

In this example, DSCP 15 flow is mapped to traffic class 3 or qos-group 3 and DSCP 30 flow is mapped to TC 5 or qos-group 5. The rest of the DSCP flows are mapped based on the trust that is configured.