there is a lot of documentation on the cisco site who explains in great detail how the switch ports on a 6500/7600 device trust or not the CoS, DSCP, IP Precedence of the packets entering in the switch. Please consider the following situations and if is possible, try to give me an answer :
1. an ethernet frame enters on a 6500/7600 on a access port. the trust state of the port is "mls qos trust cos".
what the switch will trust in this case, because the ethernet frame doesn't have an 802.1p field inserted.
2. the trust or untrust state is applied also on the physical routed ports on a 6500/7600 device ?
1) configuring the trust state on a port where you receive untagged traffic is a configuration error. should be enabled only on 802.1Q frames. having said that, if you are able ot do it it will result nothing but into default cos of 0. as the .1P would be left untouched at default value.
i do some tests in the mean time. on a access or routed port (ports who receives untagged frames), if the port is configured to untrusted state, if the mls qos cos is set to a non-zero value on the incoming port, on the outgoing the internal COS value is copied on the ip precedence (dscp) field.
if the port on the ingress is in untrusted state and the mls qos cos is 3, the packets on the output get DSCP equal to 0. but if on the same port i set to trust de cos and the same mls qos cos is 3, all the packets on the output has DSCP precedence 3. the port is an routed port.
also , on the cisco site there is a document who explains this behaviour :
If the port is in untrusted state, mark the frame with the port default CoS ans pass the header to the switching engine (PFC). If the port is set to one of the trust states, perform one of these two options :
. if the frame does not have a received CoS (dot1q or ISL), apply the default port CoS.
. for dot1q and ISL frames, keep the frame as it is.
if the port is in untrusted state, mark the frame with the default port CoS ... in my case the default was 3, but i received the packets with the precedence 0 ; they not mention if the frames are tagged or tagged for this scenario.
If you have a live issue at hand may be you can elaborate the issue with proper background. So that its easy to get a perspective to give an answer.
Thats because if you are trying to test the commands available, what may happen is they are 'N' number of configuration options available in 7600 for QOS. And in testing the commands and their funtionality you amy be overriding each others function, and getting contradictory results.
Introduction: The "external-out enable" command is available for
configuration under the "router ospf process" in case of the IOS-XR
operating system. This command basically enables advertisement of
intra-area routes on the device as external routes in th...
IntroductionIn this article we'll discuss how to troubleshoot packet
loss in the asr9000 and specifically understanding the NP drop counters,
what they mean and what you can do to mitigate them. This document will
be an ongoing effort to improve troublesh...