Concept Guide

In cases such as these, where class-maps with overlapping ACL rules are applied to dierent queues, use the keyword order. Dell EMC
Networking OS writes to the CAM ACL rules with lower order numbers (order numbers closer to 0) before rules with higher order numbers
so that packets are matched as you intended.
• Specify the order in which you want to apply ACL rules using the keyword order.
order
The order can range from 0 to 254.
By default, all ACL rules have an order of 255.
Displaying Congured Class Maps and Match Criteria
To display all class-maps or a specic class map, use the following command.
Dell EMC Networking OS Behavior: An explicit “deny any" rule in a Layer 3 ACL used in a (match any or match all) class-map creates a
"default to Queue 0" entry in the CAM, which causes unintended trac classication. In the following example, trac is classied in two
Queues, 1 and 2. Class-map ClassAF1 is “match any,” and ClassAF2 is “match all”.
• Display all class-maps or a specic class map.
EXEC Privilege mode
show qos class-map
Examples of Trac Classications
The following example shows incorrect trac classications.
DellEMC#show running-config policy-map-input
!
policy-map-input PolicyMapIn
service-queue 1 class-map ClassAF1 qos-policy QosPolicyIn-1
service-queue 2 class-map ClassAF2 qos-policy QosPolicyIn-2
DellEMC#show running-config class-map
!
class-map match-any ClassAF1
match ip access-group AF1-FB1 set-ip-dscp 10
match ip access-group AF1-FB2 set-ip-dscp 12
match ip dscp 10 set-ip-dscp 14
match ipv6 dscp 20 set-ip-dscp 14
!
class-map match-all ClassAF2
match ip access-group AF2
match ip dscp 18
DellEMC#show running-config ACL
!
ip access-list extended AF1-FB1
seq 5 permit ip host 23.64.0.2 any
seq 10 deny ip any any
!
ip access-list extended AF1-FB2
seq 5 permit ip host 23.64.0.3 any
seq 10 deny ip any any
!
ip access-list extended AF2
seq 5 permit ip host 23.64.0.5 any
seq 10 deny ip any any
In the previous example, the ClassAF1 does not classify trac as intended. Trac matching the rst match criteria is classied to Queue 1,
but all other trac is classied to Queue 0 as a result of CAM entry 20419.
When you remove the explicit “deny any” rule from all three ACLs, the CAM reects exactly the desired classication.
Quality of Service (QoS)
685