Cisco APIC Layer 3 Networking Configuration Guide, Release 6.2(x)

PDF

Cisco APIC Layer 3 Networking Configuration Guide, Release 6.2(x)

Configure QoS contracts for L3Outs using the GUI

Updated: April 17, 2026

Want to summarize with AI?

Log in

Configures contract-based QoS classification for traffic entering through an L3Out by setting VRF enforcement, defining a DSCP filter, and creating a contract subject.

Use this procedure to configure QoS for L3Out traffic through a contract.

Beginning with release 4.0(1), use custom QoS policies for L3Out QoS as described in Configure QoS directly on an L3Out using the GUI .

Contract-based QoS classification takes precedence over QoS policies that are configured directly on the L3Out.

Procedure

  1. Configure the consumer-tenant VRF for QoS enforcement on the border leaf switch that hosts the L3Out:

    1. From the menu bar, choose Tenants > tenant_name .
    2. In the Navigation pane, expand Networking, right-click VRFs, and choose Create VRF.
    3. In the Name field, enter a name for the VRF.
    4. Set Policy Control Enforcement Preference to Enforced.
    5. Set Policy Control Enforcement Direction to Egress.

      Contract-based QoS classification requires egress VRF enforcement.

    6. Configure the remaining VRF settings for the L3Out, and then click Submit.

  2. Create a filter that matches the DSCP value for traffic governed by the contract:

    1. In the Navigation pane, under the tenant that consumes the L3Out, expand Contracts, right-click Filters, and choose Create Filter.
    2. In the Name field, enter a filter name.
    3. In the Entries field, click + to add a filter entry.
    4. Configure the filter-entry details, click Update, and then click Submit.
    5. Expand the filter, and select the filter entry.
    6. Set Match DSCP to the required DSCP value, such as EF, and then click Submit.

  3. Create a contract and associate the DSCP filter with a contract subject:

    1. Under Contracts, right-click Standard, and choose Create Contract.
    2. In the Name field, enter a contract name.
    3. From the QoS Class field, select the QoS priority for traffic that the contract governs. Alternatively, select a value from the Target DSCP field.

      Contract-based QoS classification takes precedence over QoS policies that are configured directly on the L3Out.

    4. In the Subjects field, click + to add a contract subject.
    5. In the Name field, enter a subject name.
    6. From the QoS Priority field, select a priority other than Unspecified.
    7. Under Filter Chain, click + in the Filters field, and select the filter that you created.
    8. Click Update.
    9. In the Create Contract Subject dialog box, click OK.
    10. In the Create Contract dialog box, click Submit.

The VRF enforcement settings and contract-based QoS classification are configured for L3Out traffic.