[c-nsp] Qos Sup2T disable trust globally ? ports untrusted by default ?

[Chris Evans]

IIRC

On the cat6k if you have mls qos disabled globally it will trust.   If you
enable qos i believe it will rewrite based on your mapping tables.
On Jul 13, 2012 8:38 AM, "Blake Dunlap" <ikiris at gmail.com> wrote:

> If you look at the documentation for the Sup2T it does actually specify
> default trust when I looked yesterday. I was rather surprised myself.
>
> -Blake
>
> On Fri, Jul 13, 2012 at 4:26 AM, selamat pagi <ketimun at gmail.com> wrote:
>
> > You are right, according to 6500 documentation (not specific to sup2T or
> > 15.0)  it should be untrusted by default.
> >
> > However, checking on a switch with no qos configured, we get the output
> > below.
> >
> > I assume that means all ports are trusted ...??
> >
> >
> > VSS#sh queueing interface gi 1/2/1
> > Interface GigabitEthernet1/2/1 queueing strategy:  Weighted Round-Robin
> >
> >   Port QoS is disabled globally
> >   Queueing on Gi1/2/1: Tx Disabled Rx Disabled
> >
> > Trust boundary disabled
> >
> >   Trust state: trust DSCP
> >   Trust state in queueing: trust COS
> >   Extend trust state: not trusted [COS = 0]
> >   Default COS is 0
> >     Queueing Mode In Tx direction: mode-cos
> >
> > cheers, keti
> >
> >
> > On Thu, Jul 12, 2012 at 4:48 PM, Phil Mayers <p.mayers at imperial.ac.uk
> > >wrote:
> >
> > > On 12/07/12 15:02, selamat pagi wrote:
> > >
> > >> Hi
> > >>
> > >> On the interface level, I believe the command
> > >>    *platform qos trust none remark *
> > >> can be used to ignore/discard incoming  dscp/cos-value
> > >>
> > >> Is there a global command  to disable trust ?
> > >>
> > >
> > > Isn't it the default? It was on sup720/Earl7 modules.
> > >
> > > ______________________________**_________________
> > > cisco-nsp mailing list  cisco-nsp at puck.nether.net
> > > https://puck.nether.net/**mailman/listinfo/cisco-nsp<
> > https://puck.nether.net/mailman/listinfo/cisco-nsp>
> > > archive at http://puck.nether.net/**pipermail/cisco-nsp/<
> > http://puck.nether.net/pipermail/cisco-nsp/>
> > >
> > _______________________________________________
> > cisco-nsp mailing list  cisco-nsp at puck.nether.net
> > https://puck.nether.net/mailman/listinfo/cisco-nsp
> > archive at http://puck.nether.net/pipermail/cisco-nsp/
> >
> _______________________________________________
> cisco-nsp mailing list  cisco-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/cisco-nsp
> archive at http://puck.nether.net/pipermail/cisco-nsp/
>