[c-nsp] QoS sometimes drives me nuts

[Security Team]

On 8/25/10 10:59 PM, "Mikael Abrahamsson" <swmike at swm.pp.se> wrote:

> On Wed, 25 Aug 2010, Security Team wrote:
> 
>> Any gurus still awake?
> 
> Have you enabled "mls qos" globally? Are you doing "mls qos trust dscp" on
> the interface?

I have mls qos there globally, yes. Sorry I omitted that important fact.

> "mls qos" should be on to do what you want, mls qos trust dscp needs to be
> not there, otherwise the 6500 won't change anything (trust dscp means just
> pass it as it is).

Right, the interface itself has no trusts on it. Er, No! It does, I just
looked! I thought I had removed that!

That was it, thanks Mikael.

CJ