I’m wondering what exactly the following commands from my core switch are accomplishing. I see only the following references, but no ACL definitions or any other references to these mapped names anywhere else in the configs. What are they doing?

class-map match-all REYCM_EDGE_PORTS
match input-interface FastEthernet1/0/1 - FastEthernet1/0/48
class-map match-all REYACL_VOICE
match access-group name REYACL_VOICE
class-map match-all REYCM_DMS
match access-group name REYACL_DMS
!
!
policy-map REYPM_WLAN
policy-map REYPM_WLAN_POLICE
class REYCM_EDGE_PORTS
police 12000000 60000 exceed-action policed-dscp-transmit

Answer from robertmiller20 on community.spiceworks.com
🌐
Cisco
cisco.com › c › en › us › td › docs › routers › sdwan › command › iosxe › qualified-cli-command-reference-guide › m-class-map.pdf pdf
Class-Map Commands • class-map, on page 1 • match qos-group, on page 3
The zone-based firewall feature can be enabled on a Cisco IOS XE Catalyst SD-WAN devices for inspecting · traffic exchange between multiple service VPNs. policy-map type inspect command can be used to create · a policy-map under which class or class type inspect command can be called for taking further actions on the ... The following example shows how to create a policy-map type inspect fw_policy1.
🌐
Cisco
content.cisco.com › chapter.sjs
Cisco Content Hub - Class Map Configuration Mode Commands
April 27, 2023 - Use the class-map command to add or modify class maps and match conditions to identify specific types of traffic for use in policies. This command invokes the Class Map configuration mode, which is indicated by a different prompt (config-cmap).
Discussions

Understanding class and policy maps
I’m wondering what exactly the following commands from my core switch are accomplishing. I see only the following references, but no ACL definitions or any other references to these mapped names anywhere else in the configs. What are they doing? class-map match-all REYCM_EDGE_PORTS match ... More on community.spiceworks.com
🌐 community.spiceworks.com
15
7
February 10, 2018
Policy-map and class-map
Class maps are used to build a policy map. The class-map typically contains some set of rules of what you're trying to match (e.g. match traffic against this access-list, match traffic with a certain DSCP marking, etc.). The policy-map references the class-maps and then adds some action, like setting a bandwidth limit. The class-maps can be re-used in different policy-maps, policy-maps can also be nested/contain other policy-maps. class-map match-any VOICE match ip dscp ef match ip dscp af31 match access-group name VOICE-NETWORKS class-map match-any ROUTING match ip dscp cs6 Here I have two class maps. These are both "match-any", meaning if any of the rules defined are matched, then the class-map as a whole is matched. If you're familiar with boolean logic, this would be an OR statement. You could also do a "match-all", where all the match statements have to be true for the class-map to be a match. "match-all" would be a boolean AND. policy-map WAN-QoS-Policy class VOICE priority percent 25 class ROUTING bandwidth percent 3 Here I have a policy-map, which is calling the previous class-maps for VOICE and ROUTING. In this policy map, I'm doing some QOS stuff, where traffic matching the VOICE class map would get a certain QOS policy applied (priority percent 25), and traffic matching the ROUTING class map has a different QOS policy applied (bandwidth percent 3). Because its modular, I could create a different policy-map and keep using the same class-maps, if I wanted to keep using those matching patterns but apply a different action to them (maybe I have two WAN circuits with different bandwidths so I need to change my QOS policies. policy-map WAN-QoS-Policy-HighBandwidth class VOICE priority percent 5 class ROUTING bandwidth percent 1 policy-map WAN-QoS-Policy-ShittyCircuit class VOICE priority percent 50 class ROUTING bandwidth percent 10 None of this does anything without these policies actually being applied somewhere, so you still need to figure out where you want these policies to take effect interface gig0/0 service-policy output WAN-QoS-Policy-HighBandwidth interface gig0/1 service-policy output WAN-QoS-Policy-ShittyCircuit As for your SIP questions, if it's a router there should be a SIP-UA section, there may be a destination server defined there. You may also have a SIP destination defined under dial-peers, if you have any dial-peers defined. There's also some config at the top with voice classes. Look for any commands that mention something like binding or source, that would be telling the router to use a specific interface/IP when handling voice traffic. The syntax is different if its SIP vs. h323 or MGCP, but they all involve terms like source interface or bind More on reddit.com
🌐 r/ccna
7
5
July 22, 2019
🌐
Cisco
cisco.com › assets › sol › sb › WAP561_Emulators › WAP561_Emulator_v1.0.4.4 › help › QoS4.html
Class Map
November 11, 2019 - For example, to check only the first four octets of a MAC address, a MAC mask of 00:00:00:00:ff:ff is used. A MAC mask of 00:00:00:00:00:00 checks all address bits and is used to match a single MAC address. VLAN ID—A VLAN ID to be matched for packets. The VLAN ID range is from 0 to 4095.
🌐
Cisco
cisco.com › home › support › product support › routers › cisco wide area application services (waas) software › command references
Cisco Wide Area Application Services Command Reference (Software Version 5.0.1) - Class Map Configuration Mode Commands [Cisco Wide Area Application Services (WAAS) Software] - Cisco
July 2, 2012 - To configure the class map description, use the description class map configuration command. To unconfigure the description, use the no form of this command. ... No default behavior or values. ... To configure a match condition based on peer ID for the class map, use the match peer class map configuration command.
🌐
Cisco
cisco.com › home › support › product support › routers › cisco sd-wan › command references
Cisco IOS XE Catalyst SD-WAN Qualified Command Reference - Class-Map Commands [Cisco SD-WAN] - Cisco
January 15, 2026 - class-map match-any BestEffort match qos-group 3 ! class-map match-any Bulk match qos-group 4 ! class-map match-any Critical match qos-group 1 ! class-map match-any Critical-Low match qos-group 2 ! class-map match-any BULK match qos-group 2 ! class-map match-any CONTROL-SIGNALING match qos-group 4 ! class-map match-any CRITICAL-DATA match qos-group 1 ! class-map match-any Default match qos-group 5 ! class-map match-any INTERACTIVE-VIDEO match qos-group 3 ! class-map match-any LLQ match qos-group 0 ! class-map match-any Queue0 match qos-group 0 ! class-map match-any Queue1 match qos-group 1 ! c
🌐
Cisco Community
community.cisco.com › t5 › routing › what-is-diff-between-route-map-policy-map-class-map › td-p › 1482098
what is diff between Route-map,policy-map & Class-map - Cisco Community
January 31, 2010 - On interface A (traffic in), I created a class-map using NBAR commands to match-any protocol ms-update, the policy-map to set dscp to 1 and applied to an interface. On the same interface, I have another policy-map to match an ACL with ip any ...
Find elsewhere
🌐
Reddit
reddit.com › r/ccna › policy-map and class-map
r/ccna on Reddit: Policy-map and class-map
July 22, 2019 -

I'm trying to decipher a router config and I am trying to figure out how these 2 command work together. I've been reading about it but I need someone to explain it to me like I'm 5.

Also, how would I go about determining which of these VLANs is identified as a voice VLAN? There is no obvious voice configurations it looks like all the voice data is being handled by the SIP trunk but I can't figure out which IP is the SIP trunk...

anyway..

Top answer
1 of 1
5
Class maps are used to build a policy map. The class-map typically contains some set of rules of what you're trying to match (e.g. match traffic against this access-list, match traffic with a certain DSCP marking, etc.). The policy-map references the class-maps and then adds some action, like setting a bandwidth limit. The class-maps can be re-used in different policy-maps, policy-maps can also be nested/contain other policy-maps. class-map match-any VOICE match ip dscp ef match ip dscp af31 match access-group name VOICE-NETWORKS class-map match-any ROUTING match ip dscp cs6 Here I have two class maps. These are both "match-any", meaning if any of the rules defined are matched, then the class-map as a whole is matched. If you're familiar with boolean logic, this would be an OR statement. You could also do a "match-all", where all the match statements have to be true for the class-map to be a match. "match-all" would be a boolean AND. policy-map WAN-QoS-Policy class VOICE priority percent 25 class ROUTING bandwidth percent 3 Here I have a policy-map, which is calling the previous class-maps for VOICE and ROUTING. In this policy map, I'm doing some QOS stuff, where traffic matching the VOICE class map would get a certain QOS policy applied (priority percent 25), and traffic matching the ROUTING class map has a different QOS policy applied (bandwidth percent 3). Because its modular, I could create a different policy-map and keep using the same class-maps, if I wanted to keep using those matching patterns but apply a different action to them (maybe I have two WAN circuits with different bandwidths so I need to change my QOS policies. policy-map WAN-QoS-Policy-HighBandwidth class VOICE priority percent 5 class ROUTING bandwidth percent 1 policy-map WAN-QoS-Policy-ShittyCircuit class VOICE priority percent 50 class ROUTING bandwidth percent 10 None of this does anything without these policies actually being applied somewhere, so you still need to figure out where you want these policies to take effect interface gig0/0 service-policy output WAN-QoS-Policy-HighBandwidth interface gig0/1 service-policy output WAN-QoS-Policy-ShittyCircuit As for your SIP questions, if it's a router there should be a SIP-UA section, there may be a destination server defined there. You may also have a SIP destination defined under dial-peers, if you have any dial-peers defined. There's also some config at the top with voice classes. Look for any commands that mention something like binding or source, that would be telling the router to use a specific interface/IP when handling voice traffic. The syntax is different if its SIP vs. h323 or MGCP, but they all involve terms like source interface or bind
🌐
Cisco
cisco.com › home › support
QoS: Policing and Shaping Configuration Guide, Cisco IOS XE Release 3S - Class-Based Policing [Support] - Cisco
November 24, 2014 - In the following example, class-based policing is configured with the average rate at 8000 bits per second, the normal burst size at 1000 bytes, and the excess burst size at 1000 bytes for all packets leaving the interface. class-map access-match match access-group 1 exit policy-map police-setting class access-match police 8000 1000 1000 conform-action transmit exceed-action set-qos-transmit 1 violate-action drop exit exit service-policy output police-setting
🌐
Cisco
cisco.com › assets › sol › sb › Switches_Emulators_v2_3_5_xx › help › 250 › tesla_250_olh › class_maps.html
Class Mapping
April 25, 2012 - STEP 1 Click Quality of Service > QoS Advanced Mode > Class Mapping. For each class map, the ACLs defined on it are displayed along with the relationship between them. Up to three ACLs can be displayed along with their Match, which can be either And or Or. This indicates the relationship between ...
🌐
Cisco
cisco.com › c › en › us › td › docs › app_ntwk_services › waas › waas › v551 › reference › cmdr › classmap.pdf pdf
Class Map Configuration Mode Commands
To configure a match condition based on layer 7 protocol for the class map, use the match protocol class · map configuration command. To unconfigure a match condition, use the no form of this command.
🌐
NetworkLessons
networklessons.com › home › quality of service › classification and marking on cisco switch
Classification and Marking on Cisco Switch
November 21, 2025 - I will show you how to do this on a Cisco catalyst switch. You can use a standard, extended, or MAC access-list in combination with MQC (Modular QoS Configuration) to get the job done. Let’s start with the standard access-list to classify traffic from the server. Since a standard access-list can only match on source IP addresses, I will be unable to differentiate between different applications… · SW1(config)#class-map match-all SERVER SW1(config-cmap)#match access-group 1
🌐
O'Reilly
oreilly.com › library › view › cisco-ios-in › 0596008694 › re561.html
match class-map — class-map - Cisco IOS in a Nutshell, 2nd Edition [Book]
August 22, 2005 - Content preview from Cisco IOS ... this command, you can nest class maps. In this example, you can see that class1 uses class2 with this command....
Author   James Boney
Published   2005
Pages   798
🌐
NetworkAcademy.IO
networkacademy.io › learning path: ccna enterprise infrastructure (200-301) ccnav1.1 › network services › the modular qos cli (mqc)
The Modular QoS CLI (MQC) | NetworkAcademy.IO
Class-map: class-default (match-any) 7874321 packets, 643824328 bytes 5 minute offered rate 4343242 bps, drop rate 432423 bps Match: any · Cisco's MQC simplifies QoS configuration with a standardized three-step process:
🌐
Cisco
cisco.com › c › en › us › td › docs › switches › datacenter › nexus9000 › sw › 6-x › qos › configuration › guide › b_Cisco_Nexus_9000_Series_NX-OS_Quality_of_Service_Configuration_Guide › configuring_classification.pdf pdf
Configuring Classification • About Classification, page 1
This example shows how to display the IP precedence class-map configuration: switch# show class-map class_ip_precedence · Configuring Protocol Classification · For Layer 3 protocol traffic, you can use the ACL classification match. Cisco Nexus 9000 Series NX-OS Quality of Service Configuration ...
🌐
Cisco
cisco.com › c › en › us › td › docs › switches › datacenter › nexus5600 › sw › qos › 7x › b_5600_QoS_Config_7x › configuring_policy_maps.pdf pdf
Configuring Policy Maps This chapter contains the following sections:
July 1, 2022 - The policy-map command is used to create a named object that represents a set of policies that are to be ... The device provides two default system classes: a no-drop class for lossless service (class-fcoe) and a drop · class for best-effort service (class-default). You can define up to four additional system classes for Ethernet
🌐
OmniSecu
omnisecu.com › ccna-security › c3pl-class-map-policy-map-and-service-policy.php
C3PL (Cisco Common Classification Policy Language), Class Map, Policy Map and Service Policy
Policy maps can define what we want to do with the traffic identified by the class map. Three types of actions can be applied on traffic with the Policy map. • Drop - Drop the traffic • Inspect - Dynamically inspect the traffic ("inspect" command is used to configure stateful inspection, which will allow the matching return traffic.) • Pass - Forward the traffic · Service Policy: Service policies define where to apply the Policy map created before. In Cisco IOS Zone Based Firewall, Service policies are finally applied to a security zone pair.
🌐
Cisco
cisco.com › c › en › us › td › docs › app_ntwk_services › waas › waas › v501 › command › reference › cmdref › classmap.pdf pdf
3-925 Cisco Wide Area Application Services Command Reference OL-26581-01
To configure a match condition based on layer 7 protocol for the class map, use the match protocol class · map configuration command. To unconfigure a match condition, use the no form of this command.