Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

LMS 3.1 Baseline Templates: Auditing a policy-map and/or class-map?

Has anyone arrived at a working method to audit the contents of a policy-map or class-map using baseline templatesb? I've tried to treat these as ordered-lists much like an ACL, but have not been met with much success (The compliance-check returns non-compliant on a switch with the appropriate commands in the proper order)

Example:

Name: PMMOAccessPolicing SubMode: Yes isPrerequisite: No

Ordered : Yes Prerequisite-Commandset : none Parent: none

policy-map PM-MO_ACCESS_POLICING

+ class CM-VOICE

+ set dscp ef

+ class CM-INTERACTIVE_VIDEO

+ set dscp af41

+ police 5000000 8000 exceed-action policed-dscp-transmit

+ class CM-STREAMING_VIDEO

+ set dscp cs4

+ police 5000000 8000 exceed-action policed-dscp-transmit

+ class CM-CALL_SIGNALING

+ set dscp cs3

+ class CM-IP_ROUTING

+ class CM-NETWORK_MANAGEMENT

+ set dscp cs2

+ police 5000000 8000 exceed-action policed-dscp-transmit

+ class CM-MISSION_CRITICAL

+ set dscp af31

+ police 5000000 8000 exceed-action policed-dscp-transmit

+ class CM-TRANSACTIONAL

+ set dscp af21

+ police 5000000 8000 exceed-action policed-dscp-transmit

+ class CM-BULK

+ set dscp af11

+ police 5000000 8000 exceed-action policed-dscp-transmit

+ class class-default

+ set dscp default

+ police 5000000 8000 exceed-action policed-dscp-transmit

Thanks,

-Jeremy

1 REPLY
Cisco Employee

Re: LMS 3.1 Baseline Templates: Auditing a policy-map and/or cla

These commands contain sub-commands, and you can't simply evaluate them all at the same level.

That is, under policy-map PM-NO_ACCESS_POLICING, when you enter class CM-VOICE, you enter another submode. Your baseline needs to descend into that submode to check for set dscp ef. You can do this with a child template under the main parent.

Each subsequent class could also be a child of main parent template.

191
Views
0
Helpful
1
Replies