Set DSCP on a host in a specific VRF

[fabriziobruzzese]

Hello,

what is the best solution in order to set DSCP on a specific ip address in a VRF ?

Whit no VRF I usually do in this way:

access-list 101 permit ip host A:B.C.D any   

!    

class-map low_p                                

match access-group 101                     

!

policy-map SET_DSCP_LOW_P            

class low_p                                                

set dscp cs1                                                    

!

interface Port-channel1

service-policy output SET_DSCP_LOW_P

thanks

[Giuseppe Larosa]

Hello Fabrizio,

apply the marking policy-map on the VRF access link on your device (it may be also an SVI L3 Vlan interface associated to the VRF), in this way you should be sure that the correct action is performed near the source.

Hope to help

Giuseppe

[fabriziobruzzese]

Ciao Giuseppe,

thanks for your fast reply, can you explain me better; the host where I wanna set a specific DSCP is routed from a sub interface of a PO like Port-channel1.100 on a specific VRF how I can configure the DSCP ?

thx

[Giuseppe Larosa]

Hello Fabrizio,

try to see if you can apply a service policy on Port-channel1.100 subinterface.

This may be supported or not depending on the platform.

If this is a Catalyst 6500 or 7600 you should be able to apply QoS to a subif

Hope to help

Giuseppe

[fabriziobruzzese]

It was my second try to set the service policy on Port-channel1.100 subinterface but the acl is not matched so the DSCP is not set

[Giuseppe Larosa]

Hello Fabrizio,

what device is involved?

 Can you post a show version

and show module if applicable and show etherchannel summary

Hope to help

Giuseppe

[fabriziobruzzese]

I have solved the first configuration applied to sub-interface works fine, It was a problem on visualization of the hits on ACL (I don't know why !) but looking the command sh policy-map interface po1.100 I see that the defined traffic is marked.

thx

[Giuseppe Larosa]

Hello Fabrizio,

good news

the show policy-map interface provides counters per class so you can see marked packets.

Hope to help

Giuseppe