подробности:class-map match-all c10out                                           
  match access-group name t10out                                     
class-map match-all c10in                                            
  match access-group name t10in                                      
!                                                                    
!                                                                    
policy-map p10out                                                    
  class c10out                                                       
     police flow mask src-only 1000000 4000 conform-action transmit exceed-action drop
policy-map p10in
  class c10in
     police flow mask dest-only 1000000 4000 conform-action transmit exceed-action drop
!
interface GigabitEthernet5/3
 switchport
 switchport access vlan 10
 switchport mode access
 no ip address
 mls qos vlan-based
!
interface Vlan10
 ip address x.x.x.x x.x.x.x
 service-policy input p10in
#sh mls qos ip
 QoS Summary [IPv4]:      (* - shared aggregates, Mod - switch module)
      Int Mod Dir  Class-map DSCP  Agg  Trust Fl   AgForward-By   AgPoliced-By
                                   Id         Id
-------------------------------------------------------------------------------
      Vl10  5  In      c10in    0    0*  dscp  1    47853195168              0
       All  5   -    Default    0    0*    No  0    47853195168              0