RE: [j-nsp] DSCP marking for packets not leaving router

From: Blaz Zupan (blaz@inlimbo.org)
Date: Wed Apr 03 2002 - 10:54:15 EST


> I think it sounds like you want to use interface-groups. Assign the
> interface to the upstream provider to an interface group:

Hey, that looks like it might be the solution. The only problem is, that I
would like to also limit packets that are marked with a certain DSCP by the
Cisco (see the ASCII art of the real situation in the reply I sent to Eduard).

What would something like this do:

filter foo {
    term one {
        from interface-group 1;
        then policer bar;
    }
    term two {
        from dscp af43;
        then policer bar;
    }
    term three {
        then accept;
    }
}

Let's say bar limits packets to 2Mbps. Would the above limit packets comming
from interface group to 2Mbps and packets comming in with DSCP af43 to 2Mbps?
Thus, the aggregate usage could be up to 4Mbps? (Which is not what I would
like).

In pseudo-code, what I would like to achieve is something like this:

filter foo {
  term one {
    from <packet comming from interface-group 1 *or* marked with dscp af43>;
    then policer bar;
  }
  term two {
    then accept;
  }
}

From the options I have, I don't seem to be able to achieve the above.



This archive was generated by hypermail 2b29 : Mon Aug 05 2002 - 10:42:35 EDT