QoS+TACACS+ASR9K: How can I set the IP precedence on the router self-generated traffic

[pedroangeldiaz]

I need to set IP Precedence when the ASR9K generate traffic to TACACS so this traffic won't be dropped by QoS on congestion environment. I tried to configured a "service-policy inbound" on the loopback (MGMT-IP), but the ASR9K doesn't allow it; my other option is PBR, but I want to avoid it because demand a lot of resources. 

[Alexei Kiritchenko · Accepted solution]

Use "tacacs-server ipv4 dscp ..." configuration command. 
It is supported since 4.3.2.
Regards,
/A

[pedroangeldiaz]

Thanks Alexei. The specific router is was testing has 4.2.3 but I'll work on that.

Is there a way to mark any traffic, for example a monitoring server that use ICMP for say something.

[Alexei Kiritchenko]

Do you mean a locally originated traffic? then no, every Application has its own configuration command (if implemented) to mark a traffic, like:

ssh server dscp ...
telnet ipv4 dscp ...
flow exporter-map XXX dscp ...
router bgp xxxx neighbor x.x.x.x dscp .....

Regard,
/A