I've a c877w router with 3 vlans configured (1 for wan, 1 for local users, 1 for wireless users). Each port of the router (it has 4 FE port) is an access port for each vlan.

I want to apply a service-policy to mark packets that pass the router from the 2 users vlan to the wan vlan.

The question is :where should I apply the policy to mark the packets. To the vlan interface or to the ports.

Juan Cruz.