Hi
I was researching to determine the expected behaviour of switchports when both commands are enabled:
interface GigabitEthernet2/0/23
mls qos trust dscp
service-policy input QOS-MARKING
(marking based on L3 ACLs with set actions, no trust)
The command reference states for the >mls qos trust< "Classification using a port trust state and a policy map are mutually exclusive. The last one configured overwrites the previous configuration." Here I'd expect some error message.
However, in my case service policy was configured the most recently (should overwrite mls qos trust command), the result is:
policy-map QOS-MARKING
class QOS-MATCH-VOICE
set ip dscp ef
class QOS-MATCH-VID
set ip dscp af41
class QOS-MATCH-HI
set ip dscp af31
class QOS-MATCH-LO
set ip dscp af21
class QOS-MATCH-DEF
set ip dscp af11
show policy-map int gigabitEthernet 2/0/23 | inc Gig| packets,
GigabitEthernet2/0/23
0 packets, 0 bytes
0 packets, 0 bytes
0 packets, 0 bytes
0 packets, 0 bytes
0 packets, 0 bytes
0 packets, 0 bytes
0 packets, 0 bytes
0 packets, 0 bytes
0 packets, 0 bytes
0 packets, 0 bytes
0 packets, 0 bytes
sh mls qos interface gi2/0/23
GigabitEthernet2/0/23
Attached policy-map for Ingress: QOS-MARKING
trust state: trust dscp
trust mode: trust dscp
trust enabled flag: ena
COS override: dis
default COS: 0
DSCP Mutation Map: Default DSCP Mutation Map
Trust device: none
qos mode: port-based
And the upstream router's service policy counters show match on every class.
Platform 2960X stack 15.2(2)E5
I understand, this is a not supported scenario, and recommended to go with one of them, not to have both configured, but the device accepts this, and the behaviour is described, but the result doesn't aligns with the description.
Any experience or view on this?
thanks,
Gyula
