05-04-2013 12:59 PM - edited 03-16-2019 05:09 PM
Hey Guys,
Need some advice.
I have some UCS server running CUCM virtual machines and i was looking for some way to see if DSCP is really being marked by them.
The UCSs are directly connected to 3750 stack which i have configured with a access-list:
Extended IP access list 101
10 permit ip host 172.23.124.130 any dscp af31 log
20 permit ip any any
and applied it to the port where i have CUCM connected.
sh cdp neighbor:
BRVIX5VALECUCMPUB001.VALENET
Gig 1/0/10 150 H VMware eth0
so that i have it configured like this:
interface GigabitEthernet1/0/10
description UCS1 - PCI1
switchport access vlan 970
switchport mode access
ip access-group 101 in
mls qos trust dscp
channel-group 11 mode on
end
the thing is... i can't see any matches on this access list (even on the event log or thought sh ip access list - i was hoping to see matches...)
The server is correctly configured to mark ICSS traffic with AF31 on service parameters.
Any advices? I would be glad...
Thanks in advance.
05-04-2013 11:37 PM
What happens if you apply the access-list to the actual port-channel (int po11)?
05-05-2013 06:28 AM
the port-channel it self doesn't accept the command.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide