mls qos class-map match-any CustomerVLAN match access-group name customer-policy_inbound match access-group name customer-policy_outbound ! policy-map VLAN-policy class CustomerVLAN police 1000000000 conform-action transmit exceed-action drop violate-action drop ! interface Vlan10 description Customer ip address x.x.x.x x.x.x.x mls qos bridged service-policy input VLAN-policy service-policy output VLAN-policy ! interface TenGigabitEthernet4/1 description Trunk switchport switchport trunk encapsulation dot1q switchport trunk allowed vlan 10 switchport mode trunk mls qos vlan-based !