To enables multilayer security (mls) QoS, define an aggregate policer, and configure the policer parameters, use the command mls qos in Global Configuration Mode. This command is a standardized implementation of the existing command “set meter” and operates similarly. The no form of the command disables the multilayer security QoS.
| Parameter | Type | Description |
|---|---|---|
aggregate-policer
|
Enter to configure the meter table identifier which is the index for the meter table. | |
<meter-id(1-65535)>
|
Integer | Enter a value for the meter table identifier. The value ranges from 1 to 65535. |
<Bits per second(1-65535)>
|
Integer | Enter a value for the average traffic rate in bits per second. This value ranges from 1 to 65535. |
<Normal burst bytes(1-65535)>
|
Integer | Enter a value for the normal burst size in bytes. The value ranges from 1 to 65535. |
exceed-action
|
Enter to configure the action to be performed on the packet, when the packets are found to be In profile (exceed). | |
drop
|
Enter to configure dropping of the packet. | |
set-ip-dscp-transmit
|
Enter to configure to change the (Differentiated Services Code Point) DSCP of the packet to that specified in policed DSCP map. |
Global Configuration Mode
iS5Comm(config)# mls qos
iS5Comm(config)# mls qos aggregate-policer 1 10 10 exceed-action drop