Configuring an ATM PVC to trust DSCP

smith.dean · ‎09-04-2007

This sounds like an easy one, but I'm struggling with the command syntax to allow an ATM PVC to trust incoming DSCP values marked downstream. Using 3745 routers with 12.3T code, it appears that mls rp ip needs to be enabled but when I try to do this on a sub-interface/PVC, it wants a VLAN-ID. I'm a bit confused and wouldn't have thought it would be this difficult to implement. Anyone any ideas?

Cheers

Joseph W. Doherty · ‎09-04-2007

When you write you need to trust inbound DSCP markings, trust how? Reason I ask, don't recall Cisco routers normally remarking an inbound DSCP unless you configure it to do so.

smith.dean · ‎09-04-2007

You're right. I think that was the concept I was struggling to grasp; whether or not you need to explicitly configure the WAN interface as a trust boundary or not. Or to put it another way, will it re-write values by default or not. I wasn't sure and the fact i couldn't find any doc on CCO for how to configure an explicit trust probably should have alerted me to the fact you don't have to. I just labbed this up as well and sure enough, it will just pass the DSCP values by default (unless, as you suggested, you specifically apply a service-policy to change it). Thanks for your help though, it is much appreciated.

Joseph W. Doherty · ‎09-04-2007

Great! Be warned though, believe some of Cisco switches do reset DSCP unless you explicitly set them to "trust".

smith.dean · ‎09-04-2007

Yeah, switches do for sure. That's what led to my confusion with the router platforms. I've explicitly set the trust interfaces on the switches as part of the mls qos configurations and I'm comfortable with that. Now I know the routers will trust by default, I'm find with that too. thanks for your interest though Joseph.

Cheers