Administrator Guide

Layer 2 Switching Commands 689
console(config-policy-classmap)#mark ip-precedence 2
console(config-policy-classmap)#
match access-group
Use the match access-group command to add ACL match criteria to a class
map. Use the no form of the command to remove the ACL match criteria.
Syntax
match access-group name name
no match access-group name name
• name—The name of an access-list. Only MAC, IPv4, and IPv6 access-lists
are allowed.
Default Configuration
No access-lists are configured for a class-map.
Command Mode
Class-Map Configuration mode
User Guidelines
ACLs are used to classify traffic and class/policy maps are used to define the
QoS treatment of the traffic class. The ACL is used for classification only, and
the result of classification is match or not match. Access-groups identified in
a class-map are applied in order of appearance in the class-map declaration
(regardless of ACL number). ACLs in an access-group are applied in order of
ACL number.
Access-groups may only be specified in ingress class maps.
The clauses in an access-list referenced in a class-map are used solely to
match (or not match) traffic. Action (set/drop/mirror/rate-limit) clauses in
ACLs referenced by a policy are ignored for the purposes of policy application.
The permit and deny clauses have a different meaning than that used in a
standard ACL.