Interface based DSCP Marking

[Srijit Banerjee]

We have a scenario where R1 running ebgp is connected to different BGP Peers via fa0/1 & fa0/2.

Now my goal is to mark all traffic flowing through fa0/2 with a DSCP mark of 36 for both incoming & outgoing traffic and convey this marking to port fa0/3 (& other ports when required) where WireShark will be running for analysis.

How to achieve this? I did the following but results are not fully accurate.

interface FastEthernet0/2
service-policy input Test
ip access-list extended Google
permit ip any any
class-map match-all Test
match input-interface GigabitEthernet0/0
policy-map Test
class Test
set dscp af42

[Philip D'Ath]

You don't give any hint as to what kind of device this is, but re-arranging what you have a little bit.

policy-map Test
  class class-default
    set dscp af42

interface FastEthernet0/2
  service-policy input Test
  service-policy output Test

[Srijit Banerjee]

Model is Cisco 7200 VXR.

Tried your suggestion but some IPs are not getting marked.. But some are marked..

Will it be easy to have an address list of all the IP Ranges from where the traffic comes through the interface and then mark? 

[Philip D'Ath]

What I suggested targets "class-default" - which is everything. Either everything (or nothing) should be getting marked.

Which NPE engine do you have, and what software version are you running?

[Srijit Banerjee]

NPE G2..

So  we can mark all input traffic in port X with dscp and can send that marking in output to port y using class default?