[j-nsp] Assigning IP PREC-6 for HTTP traffic of ae0.2 interface

[Chris Evans]

On most juniper platforms you cannot mark on ingress.  You have to do the
whole convaluded process of setting up forwarding classes and doing remark
policies.

You have to apply these remark filters on all exit points of the box to get
traffic marked.  IMHO this is an awful implementation and I've asked for
this to be changes but they don't listen. All other vendors all ingress
remarking...
On Apr 17, 2011 3:37 AM, "medrees" <medrees at isu.net.sa> wrote:
> Hi Expertise
>
> Can you help me to assign IP-PREC 6 for all HTTP traffic received
> from ae0.2 aggregate sub-interface where I tried that using firewall
filter
> and it failed and gave me message "then dscp" not supported on ae0".
>
> These is the applied configuration
>
> R# show firewall family inet filter SET-PREC-6
> term PREC-6 {
> then {
> accept;
> dscp cs6;
> }
> }
>
> {master}[edit]
> R# show interfaces ae0.2
> vlan-id 2;
> family inet {
> filter {
> input SET-PREC-6;
> }
>
> R# commit check
> re0:
> [edit interfaces ae0 unit 2 family inet]
> 'filter'
> Referenced filter 'SET-PREC-6' can not be used as "then dscp" not
> supported on ae0.
> error: configuration check-out failed
>
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/juniper-nsp