There is another way to do it though the method suggested by Will is more suited

Since the data vlan will be having a seperate subnet you can also match that subnet and set the DSCP to 0

ip access-list extended data

permit ip any

class-map match-all set-dscp

match access-group name data

policy-map upstream-QoS

class set-dscp

set ip dscp 0

apply this policy inbound to the switch ports

int g0/1

service-pollicy input upstream-QoS

HTH, rate if it does

Narayan

When I apply your suggestion, it removes the interface command 'mls qos trust dscp' which I need to trust the dscp values of the phone.

Here is what I originally have on the interface:

interface FastEthernet1/0/11

description IP Phone and PC

switchport access vlan 10

switchport mode access

switchport voice vlan 910

speed 100

duplex full

srr-queue bandwidth share 10 10 60 20

srr-queue bandwidth shape 10 0 0 0

mls qos trust dscp

auto qos voip trust

spanning-tree portfast

end

Here is the config after applying the vlan-based Qos:

interface FastEthernet1/0/11

description Phone/PC w/o trunk to lab PBX

switchport access vlan 10

switchport mode access

switchport voice vlan 910

speed 100

duplex full

srr-queue bandwidth share 10 10 60 20

srr-queue bandwidth shape 10 0 0 0

mls qos vlan-based

auto qos voip trust

spanning-tree portfast

end

How would I make sure that the DSCP values of the IP phone were kept intact?