What is Policy Map?

Understanding Policy Map

A policy map is a Cisco IOS configuration element that specifies the Quality of Service (QoS) actions applied to classified traffic. Working within the Modular QoS CLI (MQC) framework, a policy map ties traffic classes to treatment such as marking, policing, shaping, or queuing, and is then attached to an interface to enforce the policy.

MQC uses three building blocks. A class map identifies traffic using match criteria (ACLs, DSCP values, protocols via NBAR, or ports). The policy map references one or more class maps and defines the action for each class, for example setting a DSCP value, policing a class to a bit rate, shaping output, or assigning bandwidth and priority queues. The `service-policy` command then binds the policy map to an interface in the inbound or outbound direction.

This matters for security and reliability because QoS policy enforcement protects critical traffic and limits abuse. Policing within a policy map can rate-limit or drop traffic that exceeds a defined threshold, mitigating bandwidth-exhaustion and certain denial-of-service conditions, and ensuring that voice, control, and management traffic remain available during congestion. Marking lets downstream devices trust and prioritize traffic consistently across the network.

For example, an engineer wanting to protect VoIP creates a class map matching RTP traffic, then builds a policy map that places that class in a low-latency priority queue with guaranteed bandwidth while policing a separate class of bulk file-transfer traffic to a capped rate. Applying the policy map outbound on the WAN interface with `service-policy output WAN-QOS` ensures calls stay clear during peak load and that no single application can starve the link.