I’m wondering what exactly the following commands from my core switch are accomplishing. I see only the following references, but no ACL definitions or any other references to these mapped names anywhere else in the configs. What are they doing?

class-map match-all REYCM_EDGE_PORTS
match input-interface FastEthernet1/0/1 - FastEthernet1/0/48
class-map match-all REYACL_VOICE
match access-group name REYACL_VOICE
class-map match-all REYCM_DMS
match access-group name REYACL_DMS
!
!
policy-map REYPM_WLAN
policy-map REYPM_WLAN_POLICE
class REYCM_EDGE_PORTS
police 12000000 60000 exceed-action policed-dscp-transmit

Answer from robertmiller20 on community.spiceworks.com
🌐
Cisco
cisco.com › c › en › us › td › docs › routers › sdwan › command › iosxe › qualified-cli-command-reference-guide › m-class-map.pdf pdf
Class-Map Commands • class-map, on page 1 • match qos-group, on page 3
command in class-map configuration or policy inline configuration mode. To remove a specific QoS group · value from a class map, use the no form of this command. ... The exact value from 0 to 99 used to identify a QoS group value. ... No match criterion is specified. ... To allow packets to be sent to the router without being inspected, use the pass command in policy-map-class ... No default behavior or values. ... The zone-based firewall feature can be enabled on a Cisco IOS XE Catalyst SD-WAN devices for inspecting
Discussions

Understanding class and policy maps
I’m wondering what exactly the following commands from my core switch are accomplishing. I see only the following references, but no ACL definitions or any other references to these mapped names anywhere else in the configs. What are they doing? class-map match-all REYCM_EDGE_PORTS match ... More on community.spiceworks.com
🌐 community.spiceworks.com
15
7
February 10, 2018
Policy-map and class-map
Class maps are used to build a policy map. The class-map typically contains some set of rules of what you're trying to match (e.g. match traffic against this access-list, match traffic with a certain DSCP marking, etc.). The policy-map references the class-maps and then adds some action, like setting a bandwidth limit. The class-maps can be re-used in different policy-maps, policy-maps can also be nested/contain other policy-maps. class-map match-any VOICE match ip dscp ef match ip dscp af31 match access-group name VOICE-NETWORKS class-map match-any ROUTING match ip dscp cs6 Here I have two class maps. These are both "match-any", meaning if any of the rules defined are matched, then the class-map as a whole is matched. If you're familiar with boolean logic, this would be an OR statement. You could also do a "match-all", where all the match statements have to be true for the class-map to be a match. "match-all" would be a boolean AND. policy-map WAN-QoS-Policy class VOICE priority percent 25 class ROUTING bandwidth percent 3 Here I have a policy-map, which is calling the previous class-maps for VOICE and ROUTING. In this policy map, I'm doing some QOS stuff, where traffic matching the VOICE class map would get a certain QOS policy applied (priority percent 25), and traffic matching the ROUTING class map has a different QOS policy applied (bandwidth percent 3). Because its modular, I could create a different policy-map and keep using the same class-maps, if I wanted to keep using those matching patterns but apply a different action to them (maybe I have two WAN circuits with different bandwidths so I need to change my QOS policies. policy-map WAN-QoS-Policy-HighBandwidth class VOICE priority percent 5 class ROUTING bandwidth percent 1 policy-map WAN-QoS-Policy-ShittyCircuit class VOICE priority percent 50 class ROUTING bandwidth percent 10 None of this does anything without these policies actually being applied somewhere, so you still need to figure out where you want these policies to take effect interface gig0/0 service-policy output WAN-QoS-Policy-HighBandwidth interface gig0/1 service-policy output WAN-QoS-Policy-ShittyCircuit As for your SIP questions, if it's a router there should be a SIP-UA section, there may be a destination server defined there. You may also have a SIP destination defined under dial-peers, if you have any dial-peers defined. There's also some config at the top with voice classes. Look for any commands that mention something like binding or source, that would be telling the router to use a specific interface/IP when handling voice traffic. The syntax is different if its SIP vs. h323 or MGCP, but they all involve terms like source interface or bind More on reddit.com
🌐 r/ccna
7
5
July 22, 2019
How to remove class mapping from Cisco 9200L
That's default config More on reddit.com
🌐 r/Cisco
4
3
March 14, 2024
Unable to apply outgoing service-policy on Cat 9300
Your bandwidth percentages are screwed up, and you don't have a bandwidth percentage set for the class-default. Right now you have 105% of your bandwidth allocated and you don't have any bandwidth allocated for class-default. Do you really need 25% of your bandwidth for DSCP EF? Each VoIP call only requires 88Kbps for G.711 so if you're on a gigabit port then 25% is a bit high. What are they doing with AF41 an AF31? Signalling or control traffic? If so, this should be even smaller than the DSCP EF queue. Honestly you could probably just use the Cisco auto qos voip trust and it will work OK. More on reddit.com
🌐 r/networking
3
13
July 26, 2019
🌐
Cisco
cisco.com › home › support › product support › routers › cisco wide area application services (waas) software › command references
Cisco Wide Area Application Services Command Reference (Software Version 5.0.1) - Class Map Configuration Mode Commands [Cisco Wide Area Application Services (WAAS) Software] - Cisco
July 2, 2012 - Use the class-map command to add or modify class maps and match conditions to identify specific types of traffic for use in policies. This command invokes the Class Map configuration mode, which is indicated by a different prompt (config-cmap).
🌐
Cisco
cisco.com › home › support › product support › routers › cisco wide area application services (waas) software › command references
Cisco Wide Area Applications Services Command Reference Guide 5.5.1 - Class Map Configuration Mode Commands [Cisco Wide Area Application Services (WAAS) Software] - Cisco
Use the class-map command to add or modify class maps and match conditions to identify specific types of traffic for use in policies. This command invokes the Class Map configuration mode, which is indicated by a different prompt (config-cmap).
🌐
Cisco
content.cisco.com › chapter.sjs
Cisco Content Hub - Class Map Configuration Mode Commands
April 27, 2023 - Use the class-map command to add or modify class maps and match conditions to identify specific types of traffic for use in policies. This command invokes the Class Map configuration mode, which is indicated by a different prompt (config-cmap).
Find elsewhere
🌐
Cisco
cisco.com › c › en › us › td › docs › app_ntwk_services › waas › waas › v531 › command › reference › cmdr › policyclass.pdf pdf
3-961 Cisco Wide Area Application Services Command Reference OL-30046-01
Configuration Guide. ... Inserts a new class, or moves an existing class, before the specified class. If · you do not specify an existing class name, the class is moved to the last ... distribute policy class map configuration command.
🌐
Cisco
cisco.com › c › en › us › td › docs › switches › datacenter › nexus9000 › sw › 6-x › qos › configuration › guide › b_Cisco_Nexus_9000_Series_NX-OS_Quality_of_Service_Configuration_Guide › configuring_classification.pdf pdf
Configuring Classification • About Classification, page 1
Classification is the separation of packets into traffic classes. You configure the device to take a specific action · on the specified classified traffic, such as policing or marking down, or other actions. You can create class maps to represent each traffic class by matching packet ...
🌐
Cisco
cisco.com › support › product support › routers
Class Map Configuration Mode Commands [Cisco Wide ...
January 10, 2014 - Log in to see full product documentation · Log in to see available downloads
🌐
Reddit
reddit.com › r/ccna › policy-map and class-map
r/ccna on Reddit: Policy-map and class-map
July 22, 2019 -

I'm trying to decipher a router config and I am trying to figure out how these 2 command work together. I've been reading about it but I need someone to explain it to me like I'm 5.

Also, how would I go about determining which of these VLANs is identified as a voice VLAN? There is no obvious voice configurations it looks like all the voice data is being handled by the SIP trunk but I can't figure out which IP is the SIP trunk...

anyway..

Top answer
1 of 1
5
Class maps are used to build a policy map. The class-map typically contains some set of rules of what you're trying to match (e.g. match traffic against this access-list, match traffic with a certain DSCP marking, etc.). The policy-map references the class-maps and then adds some action, like setting a bandwidth limit. The class-maps can be re-used in different policy-maps, policy-maps can also be nested/contain other policy-maps. class-map match-any VOICE match ip dscp ef match ip dscp af31 match access-group name VOICE-NETWORKS class-map match-any ROUTING match ip dscp cs6 Here I have two class maps. These are both "match-any", meaning if any of the rules defined are matched, then the class-map as a whole is matched. If you're familiar with boolean logic, this would be an OR statement. You could also do a "match-all", where all the match statements have to be true for the class-map to be a match. "match-all" would be a boolean AND. policy-map WAN-QoS-Policy class VOICE priority percent 25 class ROUTING bandwidth percent 3 Here I have a policy-map, which is calling the previous class-maps for VOICE and ROUTING. In this policy map, I'm doing some QOS stuff, where traffic matching the VOICE class map would get a certain QOS policy applied (priority percent 25), and traffic matching the ROUTING class map has a different QOS policy applied (bandwidth percent 3). Because its modular, I could create a different policy-map and keep using the same class-maps, if I wanted to keep using those matching patterns but apply a different action to them (maybe I have two WAN circuits with different bandwidths so I need to change my QOS policies. policy-map WAN-QoS-Policy-HighBandwidth class VOICE priority percent 5 class ROUTING bandwidth percent 1 policy-map WAN-QoS-Policy-ShittyCircuit class VOICE priority percent 50 class ROUTING bandwidth percent 10 None of this does anything without these policies actually being applied somewhere, so you still need to figure out where you want these policies to take effect interface gig0/0 service-policy output WAN-QoS-Policy-HighBandwidth interface gig0/1 service-policy output WAN-QoS-Policy-ShittyCircuit As for your SIP questions, if it's a router there should be a SIP-UA section, there may be a destination server defined there. You may also have a SIP destination defined under dial-peers, if you have any dial-peers defined. There's also some config at the top with voice classes. Look for any commands that mention something like binding or source, that would be telling the router to use a specific interface/IP when handling voice traffic. The syntax is different if its SIP vs. h323 or MGCP, but they all involve terms like source interface or bind
🌐
NetworkLessons
networklessons.com › home › quality of service › classification and marking on cisco switch
Classification and Marking on Cisco Switch
November 21, 2025 - If you want to verify your configuration and see if traffic is being marked, you can use the following command: SW1#show policy-map interface FastEthernet 0/1 FastEthernet0/1 Service-policy input: SET-DSCP-SERVER Class-map: SERVER (match-all) 0 packets, 0 bytes 5 minute offered rate 0 bps, drop rate 0 bps Match: access-group 1 Class-map: class-default (match-any) 0 packets, 0 bytes 5 minute offered rate 0 bps, drop rate 0 bps Match: any 0 packets, 0 bytes 5 minute rate 0 bps
🌐
Cisco
cisco.com › home › support › product support › routers › cisco sd-wan › command references
Cisco IOS XE Catalyst SD-WAN Qualified Command Reference - Class-Map Commands [Cisco SD-WAN] - Cisco
January 15, 2026 - Policy-map-class configuration mode (config-pmap-c) The zone-based firewall feature can be enabled on a Cisco IOS XE Catalyst SD-WAN devices for inspecting traffic exchange between multiple service VPNs.
🌐
Cisco
cisco.com › c › m › en_us › techdoc › dc › reference › cli › nxos › commands › qos › class-map.html
AI Infrastructure, Secure Networking, and Software Solutions - Cisco
Cisco is a worldwide technology leader powering an inclusive future for all. Learn more about our products, services, solutions, and innovations.
🌐
NetworkAcademy.IO
networkacademy.io › learning path: ccna enterprise infrastructure (200-301) ccnav1.1 › network services › the modular qos cli (mqc)
The Modular QoS CLI (MQC) | NetworkAcademy.IO
Class-map: class-default (match-any) 7874321 packets, 643824328 bytes 5 minute offered rate 4343242 bps, drop rate 432423 bps Match: any · Cisco's MQC simplifies QoS configuration with a standardized three-step process:
🌐
Cisco
cisco.com › home › support
QoS: Policing and Shaping Configuration Guide, Cisco IOS XE Release 3S - Class-Based Policing [Support] - Cisco
November 24, 2014 - In the following example, class-based policing is configured with the average rate at 8000 bits per second, the normal burst size at 1000 bytes, and the excess burst size at 1000 bytes for all packets leaving the interface. class-map access-match match access-group 1 exit policy-map police-setting class access-match police 8000 1000 1000 conform-action transmit exceed-action set-qos-transmit 1 violate-action drop exit exit service-policy output police-setting
🌐
Cisco
cisco.com › assets › sol › sb › WAP561_Emulators › WAP561_Emulator_v1.0.4.4 › help › QoS4.html
Class Map
November 11, 2019 - The Class Map page appears with additional fields, depending on the Layer 3 protocol selected: Use the fields in the Match Criteria Configuration area to match packets to a class. Select the check box for each field to be used as a criterion for a class and enter data in the related field.
🌐
Extreme Networks
documentation.extremenetworks.com › slxos › sw › 20xx › 20.4.2 › traffic › GUID-CF4D2065-02E8-4C44-918E-14BDB436FF83.shtml
Configuring a class map using an ACL
device# configure terminal device(config)# ip access-list standard IP_acl device(conf-ipacl-std)# permit host 10.10.10.0 device(conf-ipacl-std)# exit device(config)# do show running-config | include ip_acl device(config)# class-map class_1 device(config-classmap)# match access-group ip_acl device(config-classmap)# end device# show running-config | include class device# copy running-config startup-config