From: Tyson Scott (tscott@ipexpert.com)
Date: Thu Jan 08 2009 - 18:40:50 ARST
Rookie,
Based on your question I would state the policy map will not match dscp
packets from the PC except dscp 0 or cos 0 ;).
Here is the output for what you have stated
SW4#show mls qos interface f0/3
FastEthernet0/3
trust state: not trusted
trust mode: trust dscp
trust enabled flag: dis
COS override: dis
default COS: 0
DSCP Mutation Map: Default DSCP Mutation Map
Trust device: cisco-phone
qos mode: port-based
As you can see the state of the port is untrusted. If you want to trust QoS
marking from both the phone and PC just do "mls qos trust" on the interface.
SW4(config-if)#mls qos trust
SW4(config-if)#do sh mls qos int f0/3
FastEthernet0/3
trust state: trust dscp
trust mode: trust dscp
trust enabled flag: ena
COS override: dis
default COS: 0
DSCP Mutation Map: Default DSCP Mutation Map
Trust device: none
qos mode: port-based
SW4(config-if)#
Regards,
Tyson Scott - CCIE #13513 R&S and Security
Technical Instructor - IPexpert, Inc.
Telephone: +1.810.326.1444
Cell: +1.248.504.7309
Fax: +1.810.454.0130
Mailto: tscott@ipexpert.com
Join our free online support and peer group communities:
http://www.IPexpert.com/communities
IPexpert - The Global Leader in Self-Study, Classroom-Based, Video On Demand
and Audio Certification Training Tools for the Cisco CCIE R&S Lab, CCIE
Security Lab, CCIE Service Provider Lab , CCIE Voice Lab and CCIE Storage
Lab Certifications.
-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of
Rookie Ccie
Sent: Thursday, January 08, 2009 3:31 PM
To: ccielab@groupstudy.com
Subject: QOS Trust Boundry
Dear Experts,
If I enable cat qos trust boundary feature on a 3560 using *mls qos trust
device cisco-phone* command and enable an inbound policy map (to match
specific PC traffic) on the same interface, what will be the behaviour ?
Rgds
Blogs and organic groups at http://www.ccie.net
This archive was generated by hypermail 2.1.4 : Sun Mar 01 2009 - 09:43:37 ARST