Skip to content
Any configuration changes made locally on the switch won't be synchronized with Sophos Central. We recommend making changes from the Sophos Central control panel instead.

Page permalink

Always use the following permalink when referencing this page. It will remain unchanged in future help versions.

https://docs.sophos.com/nsg/switch/help/en-us/index.html?contextId=switch-configure-qos-advanced-mode

Advanced mode

QoS advanced mode lets you configure class maps and policy mapping on Sophos Switch.

Class mapping

A class map lets you name specific traffic flows and segregate them from other traffic. The class map specifies criteria to match for each traffic flow. The criteria can match an access group defined by an ACL or match a specific list of DSCP, IP precedence, or CoS values. You can create another class map and use a different name when more than one type of traffic needs classifying. Matched packets can be classified further using a policy map.

Warning

IPv4 and IPv6 can't be classified in the same class map. However, you can configure them in different class maps within the same policy.

To add a class map, do as follows:

  1. Go to Configure > QoS > Advanced mode > Class mapping.
  2. Click Add.
  3. Enter a CLS name.

  4. Select the criteria you want to match. The following options are available.

    Option Description
    Source MAC address Enter the source MAC address of the traffic.
    Destination MAC address Enter the destination MAC address of the traffic.
    EtherType value (hexadecimal) Enter the EtherType in hexadecimal format. EtherTypes correspond to specific protocols and are defined by a two-octet field within the Ethernet frame.
    VLAN ID Select the VLAN ID from the drop-down menu of currently configured VLANs.
    Source IP address Enter the source IP address of the traffic.
    Source netmask Enter the source subnet mask of the traffic.
    Destination IP address Enter the destination IP address of the traffic.
    Destination netmask Enter the destination subnet mask of the traffic.
    Source port Enter the source port of the traffic.
    Destination port Enter the destination port of the traffic.
    VLAN priority Select the VLAN priority from the drop-down menu.
    Type of service Enter the type of service. The service type range is from 0 to 63.
    Action type Select the action from the drop-down menu.
    Action from 802.1p Enter the 802.1p action priority value. The values range from 0 to 7. 0 is the lowest priority, and 7 is the highest.
    Action from DSCP Enter the DSCP action priority value. The values range from 0 to 7. 0 is the lowest priority, and 7 is the highest.
    Protocol

    Select how to read the protocol. The following options are available:

    Any

    Select from list

    Select from ID
    Protocol list If Select from list is chosen under Protocol, select the protocol from the drop-down list.
    Protocol ID If Select from ID is chosen under protocol, enter the protocol ID. The available values are from 0 to 255.
    ICMP

    Select how to read the ICMP packet information. The following options are available:

    Any

    Select from list

    Select from ID
    ICMP list If Select from list is chosen under ICMP, select the ICMP packet type from the drop-down list.
    ICMP ID If Select from ID is chosen under ICMP, enter the ICMP ID. The available values are from 0 to 255.
    ICMP code Enter the ICMP code. The available values are from 0 to 255.

  5. Click Apply.

Policy mapping

To configure policy mapping, do as follows:

  1. Go to Configure > QoS > Advanced mode > Policy mapping.
  2. Click Edit for the policy you want to map.
  3. Under Binding ports, enter the port number..
  4. Click Apply.