There are three things that need to be defined.
a) Define the traffic using Class-map command (Traffic Selection)
b) Define the policy applied to each of the above classes (Class based marking)
c) Applying the policy to an interface.
You can define multiple class maps to define different traffic. Check the example in the link that i posted before. (see at the end an example given, check out steps 1 through 5)
You need to club your traffic classes as follows.
class-map match-all Bronze-Rules-DNS
match protocol dns
match access-group name Bronze-Networks
class-map match-all Bronze-Rules-FTP
match protocol ftp
match access-group name Bronze-Networks
class-map match-all Bronze-Rules-GRE
match protocol gre
match access-group name Bronze-Networks
class-map match-all Bronze-Rules-HTTP
match protocol http
match access-group name Bronze-Networks
class-map match-all Bronze-Rules-PPTP
match protocol pptp
match access-group name Bronze-Networks
class-map match-all Bronze-Rules-POP3
match protocol pop3
match access-group name Bronze-Networks
class-map match-all Bronze-Rules-SMTP
match protocol smtp
match access-group name Bronze-Networks
class-map match-all Bronze-Rules-SSH
match protocol ssh
match access-group name Bronze-Networks
ip access-list standard Bronze-Networks
permit 192.168.2.0 0.0.0.255
Once the classes are defined, the paramaters (policy) to be set (ip precedence, rate limiting (CAR) ) etc can be set on these traffic classes using Policy map.
All traffic, that is not matched by Bronze-Rules, will fall into the default class (class-default). You need to define class-default only if you need to set any parameters for the default class.
Policy-map Restrict_Traffic
class Bronze-Rules
rate-limit output ....
rate-limit input ....
class class-default
rate-limit output .....
rate-limit input ....
Once the policy map is defined, you can apply it on an interface using "service-policy" command as follows:
int s0/0
service-policy {input | output} Restrict_Traffic -----> apply the policy map here.
Hope this helps.
Sankar Nair
UC Solutions Architect
Pacific Northwest | CDW
CCIE Collaboration #17135 Emeritus
