Choose Configuration > Services > QoS.
Click Add.
Enter the Policy Name.
Click Add Class-Maps.
Select AVC from the AVC/User Defined drop-down list.
Click either Any or All match type radio button.
Select DSCP from the Mark Type drop-down list.
1. Check the Drop check box to drop traffic from specific sources.
2. If you do not want to drop the traffic, enter the Police(kbps) and select the match type from the Match Type drop-down list. Choose the items from the available list and click move them to the selected list. Click Save.
Click Apply to Device.

Guidelines to configure default DSCP marking for unclassified AVC packets

When using Cisco Catalyst 9800 Series Wireless Controller or , ensure you configure a default DSCP marking for packets not matched by AVC policy filters. This allows consistent QoS treatment, even when your policy exceeds the 32-filter limit or cannot individually classify certain packet types.

Set a default marking action in your class map and policy map to handle all unclassified traffic.
Apply this configuration to ensure unclassified packets receive the intended QoS treatment.

Create class map (CLI)

Define a class map to identify and categorize network traffic based on application names, categories, subcategories, or application groups.

Procedure

Enter the global configuration mode.
Example:
```
Device# configure terminal
```

Create a class map.

Example:

Device(config-pmap)# class-map avc-class

Specify match to the application name, category name, subcategory name, or application group.

Example:

Device(config)# class-map avc-class
Device(config-cmap)# match protocol avc-media
Device(config)# class-map class-avc-category
Device(config-cmap)# match protocol attribute category avc-media
                        
Device# class-map class-avc-sub-category
Device(config-cmap)# match protocol attribute sub-category avc-media
                        
Device# class-map avcS-webex-application-group
Device(config-cmap)# match protocol attribute application-group webex-media

Return to privileged EXEC mode. Alternatively, press Ctrl-Z to exit global configuration mode.
Example:
```
Device(config)# end
```

Create policy map (CLI)

Define and configure a policy map in global configuration mode to classify and act on network traffic.

Procedure

Enter the global configuration mode.
Example:
```
Device# configure terminal
```
Create a policy map by entering the policy map name to enter policy-map configuration mode.
Example:
```
Device(config)# policy-map avc-policy
```
By default, no policy maps are defined.

When a policy map is used, it sets the DSCP to zero for IP packets and sets the CoS to zero for tagged packets.

Note

To delete an existing policy map, use the no policy-map policy-map-name global configuration command.
Define a traffic classification to enter policy-map class configuration mode.
Example:
```
Device(config-pmap)# class [class-map-name | class-default]
```
By default, no policy maps or class maps are defined.

If a traffic class has already been defined by using the class-map global configuration command, specify its name as class-map-name in this command.

The class-default traffic class is predefined and can be added to any policy. It is always placed at the end of a policy map. The class-default class includes an implied 'match any,' which ensures that all packets that have not already matched other traffic classes are matched by class-default.

Note

To delete an existing class map, use the no class class-map-name policy-map configuration command.
Classify IP traffic by setting a new value in the packet.
Example:
```
Device(config-pmap-c)# set dscp new-dscp 45
```
For dscp new-dscp , enter a new DSCP value to assign to the classified traffic. The range is zero to 63.
Specify the default class so that you can configure or modify its policy.
Example:
```
Device(config-pmap)# class class-default
```
Configure the default DSCP.
Example:
```
Device(config-pmap)# set dscp default
```
Return to privileged EXEC mode. Alternatively, press Ctrl-Z to exit global configuration mode.
Example:
```
Device(config-pmap)# end
```

Need help?

Open a support case

(Requires a Cisco Service Contract)

The documentation set for this product strives to use bias-free language. For the purposes of this documentation set, bias-free is defined as language that does not imply discrimination based on age, disability, gender, racial identity, ethnic identity, sexual orientation, socioeconomic status, and intersectionality. Exceptions may be present in the documentation due to language that is hardcoded in the user interfaces of the product software, language used based on RFP documentation, or language that is used by a referenced third-party product. Learn more about how Cisco is using Inclusive Language.