[j-nsp] Best way to do QOS bleach

[John Luthcinson]

Hi

What's the best way to "bleach" the possible QoS (802.1P or DSCP) bits in
CE facing ingress interfaces? The default classifier (ipprec-compatibility)
allows customers to transmit packets to NC queue which is very bad.

The optimal way would be something like this:
- classify everything in every IFL as BE
- manually specify the exceptions

set class-of-service interfaces x/y/z.a forwarding-class best-effort (for
every IFL/IFD (one can use *))
OR
specify FW filter with "then forwarding-class best-effort" in every IFL (or
w/ apply-groups)

Is there a better way?

Thanks