[j-nsp] EX4550 - changing DSCP
Aaron Gould
aaron1 at gvtc.com
Wed Jun 14 15:35:08 EDT 2017
Thanks Mark, I tried a few things with no change to CS0/DSCP 000000 on wireshark… let me know if y’all see anything wrong…
[edit interfaces ge-0/0/0 unit 0 family ethernet-switching]
+ filter {
+ input my-mf-classifier;
+ }
[edit]
+ firewall {
+ family ethernet-switching {
+ filter my-mf-classifier {
+ term my-tacacs {
+ from {
+ source-address {
+ 10.101.255.253/32;
+ }
+ }
+ then {
+ forwarding-class network-control;
+ loss-priority low;
+ }
+ }
+ }
+ }
+ }
****************************************************************
*** then I tried…
- Removed filter from ge-0/0/0, and added to vlan…
****************************************************************
[edit vlans net-mgmt]
+ filter {
+ input my-mf-classifier;
+ }
****************************************************************
*** then I tried…
- Removed filter from vlan, and added to ae0…
****************************************************************
[edit interfaces ae0 unit 0 family ethernet-switching]
+ filter {
+ output my-mf-classifier;
+ }
****************************************************************
*** then I tried…
- then tried to loss-prio high.... no change
- tried from vlan tag .. no change
- tried added from interface …no change
****************************************************************
[edit]
+ firewall {
+ family ethernet-switching {
+ filter my-mf-classifier {
+ term my-tacacs {
+ from {
+ vlan net-mgmt;
+ }
+ then {
+ forwarding-class network-control;
+ loss-priority low;
+ }
+ }
+ }
+ }
+ }
*** then tried to loss-prio high.... no change
[edit]
+ firewall {
+ family ethernet-switching {
+ filter my-mf-classifier {
+ term my-tacacs {
+ from {
+ interface ge-0/0/0.0;
+ vlan net-mgmt;
+ }
+ then {
+ forwarding-class network-control;
+ loss-priority high;
+ }
+ }
+ }
+ }
+ }
- Aaron Gould
More information about the juniper-nsp
mailing list