Auto QOS question

[CHARLIE ENGASSER]

I have a WAN with 2 locations connected via an nlan, which has priority queuing enabled on it.

On my switches, I've enabled qos via the 'mls qos' command, and issued 'auto qos trust dscp' on each port of my switches.

My question is, I have a system that will tag all it's packets with AF41, is the basic configuration enough to ensure the tag stays marked on all devices, so long as every device and port end to end knows to look for dscp? I do not want to mark packets at the switch level unless they come in to the switch already marked.

[Mark Malone]

You need to make sure your marking on the egress as well sat the wan ports, what you have above will cover you for ingress , most likely the marking will carry but its best practice to mark at each hop and make sure ingress/egress covered

The best way to test this is working correctly when configured is use a wireshark check your ip packets are marked correctly coming from specific sources you will see af41 when you open it all up

or

use extended ping with TOS 136(af41) then check are you hitting correct queues you have put it in