Hi, please always CC c-nsp. > It's a Cisco 7206 box with the IOS c7200-adventerprisek9-mz.152-4.S5.bin Alright, its not a switch, but a software router. Its should be possible to do this, even on egress. Can you post the output of: show policy-map interface GigabitEthernet0/2.17 Regards, Lukas