Corporate Headquarters

Step 2
hq-sanjose(config-pmap)# 
class
class-name
Specifies the name of a class to be created and included 
in the service policy.
Step 3
hq-sanjose(config-pmap-c)# bandwidth 
bandwidth-kbps
Specifies the amount of bandwidth in kilobits per second 
(kbps) to be assigned to the class.
Step 4
hq-sanjose(config-pmap-c)# 
queue-limit
number-of-packets
Specifies the maximum number of packets that can be 
enqueued for the class.
Step 5
hq-sanjose(config-pmap)# 
class
class-default
default-class-name
Specifies the default class in order to configure its policy.
Step 6
hq-sanjose(config-pmap-c)# 
bandwidth
bandwidth-kbps
Specifies the amount of bandwidth in kilobits per second 
to be assigned to the default class.
Step 7
hq-sanjose(config-pmap-c)# 
queue-limit
number-of-packets
Specifies the maximum number of packets that can be 
enqueued for the specified default class.
Command
Purpose
hq-sanjose(config-if)# 
service-policy output policy-map
Enables CBWFQ and attaches the specified service policy 
map to the output interface.

---

3-36
Cisco IOS VPN Configuration Guide
OL-8336-01
Chapter 3 Site-to-Site and Extranet VPN Business Scenarios
Step 5—Configuring Cisco IOS Firewall Features
Verifying Class-Based Weighted Fair Queuing
To display the contents of a specific policy map, a specific class from a specific policy map, or all policy 
maps configured on an interface, use one of the following global configuration commands:
Step 5—Configuring Cisco IOS Firewall Features
Cisco IOS software provides an extensive set of security features with which you can configure a simple 
or elaborate firewall, according to your particular requirements. When you configure Cisco IOS firewall 
features on your Cisco router, you turn your router into an effective, robust firewall.
Cisco IOS firewall features are designed to prevent unauthorized, external individuals from gaining 
access to your internal network, and to block attacks on your network, while at the same time allowing 
authorized users to access network resources.
Note
The Cisco Secure PIX Firewall can be used as an alternative to Cisco IOS firewall features. For detailed 
information on the Cisco Secure PIX Firewall, refer to the 
Cisco Secure PIX Firewall
documentation. 
Note
Although Cisco 7200 series routers support intrusion detection features, intrusion detection 
configuration procedures are not explained in this guide. For detailed information on intrusion detection, 
refer to the 
Intrusion Detection Planning Guide
. 
You can use Cisco IOS firewall features to configure your Cisco IOS router as: