Nexus 9300 - Marking DSCP based on ACL on FEX HIF possible?

[Robert Saurer]

Is it possible to remark DSCP labels based on an ACL for traffic coming in on a FEX HIF?

Is anybody already using this in production or lab?

I am asking because there is a TCAM region for FEX IPV4 Port QoS [fex-qos].

HW: Nexus 9372PX + 2248TP-E

[Robert Saurer]

It is possible and works fine.

HW: N9K-C9372PX
SW: 7.0(3)I1(3)


ip access-list TEST
  10 permit any host 8.8.8.8
class-map type qos match-all TEST
  match access-group name TEST
policy-map type qos TEST
  class TEST
    set dscp 8
  class class-default
    set dscp 0
    
interface Ethernet101/1/1   ! N2K-C2248TP-E-1GE
  switchport access vlan 130
  spanning-tree port type edge
  service-policy type qos input TEST no-stats
  
hardware access-list tcam region ifacl 0
hardware access-list tcam region qos 0
hardware access-list tcam region vacl 0
hardware access-list tcam region racl 0
hardware access-list tcam region mac-ifacl 256
hardware access-list tcam region qos-lite 256
hardware access-list tcam region fex-qos-lite 256