[c-nsp] Matching EXP bits in ME3600

[Eric Van Tol]

Hi all,
Working on ME3600X-24FS on 15.4(3)S6a and I am testing out a very simple QoS policy and it's not working. Here's my config:

class-map match-all ING-EF-CLASS
 match access-group name EF-CLASS-ACL
class-map match-all ING-EF-CLASS-EXP
 match mpls experimental topmost 5 
!
ip access-list extended EF-CLASS-ACL
 permit udp any any dscp ef
 permit udp any any dscp cs5
 permit udp any any precedence critical
 permit icmp any any dscp ef
 deny   ip any any
!
policy-map ING-UPLINK
 class ING-EF-CLASS
  set ip dscp ef
 class ING-EF-CLASS-EXP
  set mpls experimental topmost 5
!
interface GigabitEthernet0/24
 no switchport
 mtu 9800
 ip address 10.0.10.2 255.255.255.252
 ip mtu 9100
 ip router isis 
 mpls ip
 mpls mtu 9100
 service-policy input ING-UPLINK

It seems that every packet on the wire is matching the class 'ING-EF-CLASS-EXP':

ME3600X#sh policy-map interface 
 GigabitEthernet0/24 

  Service-policy input: ING-UPLINK

    Class-map: ING-EF-CLASS (match-all)  
      0 packets, 0 bytes
      30 second offered rate 0000 bps, drop rate 0000 bps
      Match: access-group name EF-CLASS-ACL
        set dscp 46

    Class-map: ING-EF-CLASS-EXP (match-all)  
      1710 packets, 175484 bytes
      30 second offered rate 1000 bps, drop rate 0000 bps
      Match: mpls experimental topmost 5 
        set mpls exp topmost 5

    Class-map: class-default (match-any)  
      0 packets, 0 bytes
      30 second offered rate 0000 bps, drop rate 0000 bps
      Match: any 

I've verified through packet captures that NO traffic I am sending across this link should be matching the EXP class-map. All the traffic being matched is verified to be straight IP or ISO (IS-IS) with no MPLS encapsulation. What is happening here?

-evt