Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE 26.1.x

PDF

Cisco Catalyst 9800 Series Wireless Controller Software Configuration Guide, Cisco IOS XE 26.1.x

Default DSCP on AVC

Updated: April 10, 2026

Want to summarize with AI?

Log in

Explains how default DSCP (Differentiated Services Code Point) values are applied within Application Visibility and Control (AVC).

Configuring default DSCP for AVC profile (GUI)

Assign a default DSCP value for an Application Visibility and Control (AVC) profile using the GUI.

Procedure

1.

Choose Configuration > Services > QoS.
2.

Click Add.
3.

Enter the Policy Name.
4.

Click Add Class-Maps.
5.

Select AVC from the AVC/User Defined drop-down list.
6.

Click either Any or All match type radio button.
7.

Select DSCP from the Mark Type drop-down list.
8.

  1. Check the Drop check box to drop traffic from specific sources.

  2. If you do not want to drop the traffic, enter the Police(kbps) and select the match type from the Match Type drop-down list. Choose the items from the available list and click move them to the selected list. Click Save.
9.

Click Apply to Device.

Guidelines to configure default DSCP marking for unclassified AVC packets

When using Cisco Catalyst 9800 Series Wireless Controller or , ensure you configure a default DSCP marking for packets not matched by AVC policy filters. This allows consistent QoS treatment, even when your policy exceeds the 32-filter limit or cannot individually classify certain packet types.

  • Set a default marking action in your class map and policy map to handle all unclassified traffic.

  • Apply this configuration to ensure unclassified packets receive the intended QoS treatment.

Create class map (CLI)

Define a class map to identify and categorize network traffic based on application names, categories, subcategories, or application groups.

Procedure

1.

Enter the global configuration mode.

Example:

Device# configure terminal
2.

Create a class map.

Example:

Device(config-pmap)# class-map avc-class
3.

Specify match to the application name, category name, subcategory name, or application group.

Example:

Device(config)# class-map avc-class
Device(config-cmap)# match protocol avc-media
Device(config)# class-map class-avc-category
Device(config-cmap)# match protocol attribute category avc-media
                        
Device# class-map class-avc-sub-category
Device(config-cmap)# match protocol attribute sub-category avc-media
                        
Device# class-map avcS-webex-application-group
Device(config-cmap)# match protocol attribute application-group webex-media
4.

Return to privileged EXEC mode. Alternatively, press Ctrl-Z to exit global configuration mode.

Example:

Device(config)# end

Create policy map (CLI)

Define and configure a policy map in global configuration mode to classify and act on network traffic.

Procedure

1.

Enter the global configuration mode.

Example:

Device# configure terminal
2.

Create a policy map by entering the policy map name to enter policy-map configuration mode.

Example:

Device(config)# policy-map avc-policy

By default, no policy maps are defined.

When a policy map is used, it sets the DSCP to zero for IP packets and sets the CoS to zero for tagged packets.

Note

To delete an existing policy map, use the no policy-map policy-map-name global configuration command.
3.

Define a traffic classification to enter policy-map class configuration mode.

Example:

Device(config-pmap)# class [class-map-name | class-default]

By default, no policy maps or class maps are defined.

If a traffic class has already been defined by using the class-map global configuration command, specify its name as class-map-name in this command.

The class-default traffic class is predefined and can be added to any policy. It is always placed at the end of a policy map. The class-default class includes an implied 'match any,' which ensures that all packets that have not already matched other traffic classes are matched by class-default.

Note

To delete an existing class map, use the no class class-map-name policy-map configuration command.
4.

Classify IP traffic by setting a new value in the packet.

Example:

Device(config-pmap-c)# set dscp new-dscp 45

For dscp new-dscp , enter a new DSCP value to assign to the classified traffic. The range is zero to 63.
5.

Specify the default class so that you can configure or modify its policy.

Example:

Device(config-pmap)# class class-default
6.

Configure the default DSCP.

Example:

Device(config-pmap)# set dscp default
7.

Return to privileged EXEC mode. Alternatively, press Ctrl-Z to exit global configuration mode.

Example:

Device(config-pmap)# end