cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
187
Views
0
Helpful
2
Replies
Highlighted
Beginner

ACL to log DSCP value comming from my UCS servers.

Hey Guys,

Need some advice.

I have some UCS server running CUCM virtual machines and i was looking for some way to see if DSCP is really being marked by them.

The UCSs are directly connected to 3750 stack which i have configured with a access-list:

Extended IP access list 101

    10 permit ip host 172.23.124.130 any dscp af31 log

    20 permit ip any any

                  

and applied it to the port where i have CUCM connected.

sh cdp neighbor:

BRVIX5VALECUCMPUB001.VALENET

                 Gig 1/0/10        150               H    VMware    eth0

so that i have it configured like this:

interface GigabitEthernet1/0/10

description UCS1 - PCI1

switchport access vlan 970

switchport mode access

ip access-group 101 in

mls qos trust dscp

channel-group 11 mode on

end

the thing is... i can't see any matches on this access list (even on the event log or thought sh ip access list - i was hoping to see matches...)

The server is correctly configured to mark ICSS traffic with AF31 on service parameters.

Any advices? I would be glad...

Thanks in advance.

2 REPLIES 2
Highlighted
Enthusiast

What happens if you apply the access-list to the actual port-channel (int po11)?

Highlighted

the port-channel it self doesn't accept the command.

Content for Community-Ad