I would like to create a QoS marking policy that re-marks packet to CS5 if the inbound traffic is SIP *and* if it is marked CS3 when it comes in. I would have expected the configuration listed below will work. I only found out when I tried to apply the config that, unlike other IOS devices, "class-map match-all" does not exist in 3850 3.3.x code. It can only do "class-map match-any" Can anyone suggest a work-around config for 3850 to achieve the same end result?
|ip access-list extended ACL-QOS-SIP|
|permit tcp any range 5060 5061 any|
|permit tcp any any range 5060 5061|
|ip access-list extended ACL-QOS-CS3|
|permit ip any any dscp cs3|
Any suggestions would be appreciated.
jlkeys, below is configuration I ended up using to resolve the issue:
ip access-list extended ACL-QOS-SIP
permit tcp any range 5060 5061 any dscp cs3
class-map match-any CM-QOS-CS5
match access-group name ACL-QOS-SIP
set ip dscp cs5
Since 3850 / 3650 IOS XE changed the class-map style, it supports one match command per class map on ingress only.