Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

sup720 PFC 3B ingress policy to mark EXP/DSCP problem


i config ingress policy on 7609 sup720 PFC3b, CE is 3560, connect to module 6408. egresss policy is configured on SIP400 spa wan GE port in same 7609.

i found i can't mark/change EXP/DSCP value on ingress port. i use match any/match access-group/match vlan/match input vlan/ for mpls vpn traffic. and use set mpls exp imposition/set dscp or police for ingress policy. i can't mark/change EXP/DSCP value , can't see any change on next hop router or end point CE.

because i can't mark/change dscp/exp value, so the egress policy in same router is not work.

cisco engineer said pfc3b ingress policy /egress policy is parallel, and suggest one command:platform ip feature sequence on ingress port/vlan interface. but this command can't work,I can't ping end ce after i use this command.

although the ingree policy and egree is parallel, why i can't see any change for exp/dscp on next hop router and mpls vpn end point.

I connect ce 3560 to another wan GE sip400 spa port in same 7609, it is work fine, I can config ingress policy on sip 400 wan GE port in same 7609, mark/change EXP/DSCP value was working fine.

can i mark dscp/EXP value on 6408 vlan interface? cisco document said no. but i must mark dscp and exp value on sup720/PFC3B 6148 vlan interface at same time. how can i get a solution

we don't want set dscp value on ce 3560.

thank you!



Re: sup720 PFC 3B ingress policy to mark EXP/DSCP problem

For received MPLS packets, the PFC3C always trusts EXP in the received topmost label. The PFC3C makes classification decisions based on the EXP bits in the received topmost label of received MPLS packets (after a policy is installed). Following links may help you