Security mechanism for fake applicatons setting CoS/QoS value

[news2010a]

Imagine someone develops a bogus application to set outbound packets/IP from a PC to DSCP = EF.

So the BogusApplication would be prioritize as if it was a voice packet.

Which mechanism again can protect against such scenario?

[Edison Ortiz]

Never enable trust on client facing switchports.

I recommend going with conditional trust, here is an example

http://www.cisco.com/en/US/docs/solutions/Enterprise/WAN_and_MAN/QoS_SRND/QoSDesign.html#wp999584

There are more examples on that page

Regards

Edison.

[Joseph W. Doherty]

"Which mechanism again can protect against such scenario?"

Trust, but verify at the first chance of doing so. If verification fails, either remark or drop.