QoS; bandwidth limiting of certain IP

[recep.sefer]

I want certain IP (i.e. 10.1.1.1) not to exceed %50 of total bandwidth even there is no traffic

here is my config

how?

class-map match-all TRAFFIC

match access-group 99
class-map match-any media
match  dscp ef
class-map match-any signaling
match  dscp cs3
!
!
policy-map queue
class signaling
    bandwidth percent 5
class media
    priority percent 25
class TRAFFIC
    ????
class class-default
    fair-queue
policy-map shape
class class-default
    shape average 512000
  service-policy queue

access-list 99 permit 10.1.1.1

[Edison Ortiz]

class TRAFFIC

police percent 50

[recep.sefer]

Thank You

I do it

But another problem ocuurs

I have 2 acl:  99 and 100

99 is for one host

100 is for all subnet for VPN

acl 99 doesn't match any  traffic

class-map match-all TRAFFIC

match access-group 99
class-map match-any media
match  dscp ef
class-map match-any signaling
match  dscp cs3
!
!
policy-map queue
class signaling
    bandwidth percent 5
class media
    priority percent 25
class TRAFFIC
    police percent 50
class class-default
    fair-queue
policy-map shape
class class-default
    shape average 512000
  service-policy queue

access-list 99 permit 10.1.1.1

access-list 100 permit ip 10.1.1.0 0.0.0.255 any

crypto map MyMap 1 ipsec-isakmp
description Tunnel
set peer x.x.x.x
set transform-set MyTransformset
match address 100

[Edison Ortiz]

Please post the show policy-map interface command to see if traffic is being matched or not.

[recep.sefer]

Thank you,

My problem is solved with qos pre-classify

crypto map MyMap 1 ipsec-isakmp
description Tunnel
set peer x.x.x.x
set transform-set MyTransformset
match address 100
qos pre-classify