How to trust DSCP on 3Com 5500

Hi all,
I have a network with Cisco switches and 3Com switches...In the Cisco switches I trust the DSCP priority. I know, this is a Cisco forum but I need help about 3Com and I'm sure you can help me:
I have a 3Com 5500 with s4m03_03_02s168e.app and I want to trust the DSCP priority on a port of the switch.
How can I solve this. ¿With the command "priority trust" on the port the DSCP priority is trusted and the paquet goes to the internal queue?
I'm not sure because if I put this command I don't see changes on the port (display current-configuration)...
¿DSCP is trusted by default on all ports?
¿How can I view on what ports is trusted DSCP with a show command?
thanks all

Please get in touch with HP Forum or H3C forum to get your query answered.
This is purely Cisco devices forum.

Similar Messages

What is the best way to trust DSCP values on 6509 interfaces?

I have 6509's with 2 Ten-gig interfaces configured into a Port Channel (routed with IP addressing) - the IOS is 12.2(18)SXE3. I want to trust the DSCP values of packets traveling through the interfaces and have applied 'mls qos trust dscp' on both the physical Ten-gig interfaces as well as the L3 Port Channel interface.
1.Is it necessary to have the statement on all the interfaces, or is just having it on the Port channel enough?
Here is the config right now:
interface Port-channel4
description to 6509-Core-A P4 (T1/3, T2/3)
ip address 164.xxx.xx.xx 255.255.255.252
ip pim sparse-mode
ip route-cache flow
mls qos trust dscp
interface TenGigabitEthernet1/1
description to 6509-Core-A T1/3 (P4)
no ip address
ip route-cache flow
mls qos trust dscp
channel-group 4 mode desirable
interface TenGigabitEthernet1/2
description to 6509-Core-A T2/3 (P4)
no ip address
ip route-cache flow
mls qos trust dscp
channel-group 4 mode desirable
Also, what command can I use to see the dscp counters? In the 3560/3750 catalyst line you can enter: 'sh mls qos int f0/1 statistics' and get a display of all the dscp/cos input/output packet counts, but I can't find a comparable command in the 6509.
2. Is there one?

I think you do this on the individual port interfaces, not the port-channel interface, becasue the queueing mechanisims associated with DSCP values are port based.
By doing this, if you have policy maps you want to use, you attach them to the ports not the port-channel.
For the command on 6509, you can use:
sh mls qos ip gigabitEthernet 1/1
Hope this helps and let me know how that works out.
Gary

Qos trust cos or qos trust dscp?

My core switches are a pair Cisco catalyst 4006s with a sup 4 module. The questions are:
1. Should I use qos trust cos or qos trust dscp when setting up qos on a per port basis?
2. Which is preferred?
3. I have a cos to dscp mapping so does it really matter?
Any help is greatly appreciated. I just want to make sure that I'm honoring all tags.
Mark

If you have ip phones connected to the switch, you can enter qos trust cos on the switch and in the router which is connected to the switch enter the command to trust the DSCP since the switch will pass the dscp information to teh router.
http://www.cisco.com/en/US/docs/ios/qos/command/reference/qos_m2.html#wp1015945

QoS - can u trust dscp and cos?

Hello,
is it possible to trust DSCP and COS at the same time?
If so, which one wins?

G'day,
It does not really make sense to trust both DSCP and CoS at the same time. You configure your switch to trust one or none of these.
As an example, if you did have the capability to trust both DSCP and CoS, imagine what would happen if you received a frame with DSCP EF and CoS 0 ? You would be faced with a conflicting situation ... if you trusted CoS, you would give a potentially high-priority packet lesser service. Whereas if you trusted DSCP, you could end up giving a potentially low-priority packet voice-like service... So the option of trusting both is not allowed.
Hope that helps - pls rate the post if it does.
Paresh

Cisco 3560 switch| mls qos trust dscp question

Hi everybody
Hi everybody .
Please consider the following example:
3560 sw f1/1--------trunk---SW2
3560 sw
f1/1
mls qos trust dscp
3560 is using default cos-dscp map, assume a 3560 receives a frame carrying IP packet on f1/1 with COS 4, what will 3560 switch do?
1) will it use its default cos --dscp map ( cos 4--.dscp 32) and rewrite 32 in dscp field of the packet in the frame and provide PHB for dscp 32 ?
Much appreciated!!
Have a great weekend.

Hi
No it will not trust the cos value, because You have configured to trust dcsp. So, the switch will trust the dcsp value in the incoming frame.
/Mikael

Why does mls qos trust dscp dissapear after reboot?

The command takes but after reboot, Invlaid inputs detected show up and "mls qos tust dscp" is gone from every interface.
Happens on both 2960-24PC-S / 2960-48PST-S switches.

Hi,
thanks for your reply.
mls qos
interface GigabitEthernet3/34
description *** DATA VLAN 35 - VOICE VLAN 34 ***
switchport
switchport trunk native vlan 36
switchport trunk allowed vlan 34,36
switchport mode trunk
mls qos trust dscp
no cdp enable
spanning-tree portfast trunk
If i don't include the global 'mls qos' command then the voice packets keep the dscp 46 value. If I add the mls qos command this causes the switch to set the dscp values to zero.
Thanks again
ps. there are some other mls commands on the switch... i don't know if these could interfere but they were already on there so i'm reluctant to remove them..

Mls qos trust dscp??? is setting my DSCP values to zero!?

Hi,
I was just doing some testing to ensure that the command 'mls qos trust dscp' is working on my 6509 switches before rolling out QoS.
Before adding any configuration I could see using wireshark that traffic from my Avaya 9608 handset was coming through with a DSCP value of 46 (as it is supposed to).
I then added the command 'mls qos' (at global level)
on examining the wireshark output this time, the DSCP value had been set to zero (i.e. it defaulted it to best effort)
I then expected by adding the commmand 'mls qos trust dscp' on the interface the phone is connected to that the DSCP value would would again be left alone?
does anybody know why this is happening?
Many thanks in advance.
Andy

Hi,
thanks for your reply.
mls qos
interface GigabitEthernet3/34
description *** DATA VLAN 35 - VOICE VLAN 34 ***
switchport
switchport trunk native vlan 36
switchport trunk allowed vlan 34,36
switchport mode trunk
mls qos trust dscp
no cdp enable
spanning-tree portfast trunk
If i don't include the global 'mls qos' command then the voice packets keep the dscp 46 value. If I add the mls qos command this causes the switch to set the dscp values to zero.
Thanks again
ps. there are some other mls commands on the switch... i don't know if these could interfere but they were already on there so i'm reluctant to remove them..

"mls qos trust dscp" vs. "mls qos trust cos"

Are these statements correct ?
1. If using QoS profile without setting "wired qos protocol", always use "mls qos trust dscp" on the WLC trunk port
- downstream wmm traffic will be policed down to "?" (this one I'm not sure, is it "not policed" or "policed down to cos 6 for platinum, etc")
2. If using QoS profile with setting "wired qos protocol",
- use "mls qos trust cos" on the WLC trunk port if you want outgoing LWAPP traffic COS/DSCP to reflect QoS profile setting and if you want to rewrite DSCP in the outgoing upstream traffic to QoS profile setting
- use "mls qos trust dscp" on the WLC trunk port if you want LWAPP traffic COS/DSCP to reflect original DSCP setting and if you want to leave DSCP alone in the outgoing upstream traffic
3. With either "mls qos trust cos" or "mls qos trust dscp" on WLC trunk port, downstream wmm traffic will be policed down to "wired qos protocol" setting (What if "wired qos protocol" is not set, will it be policed down to, for example, cos 6 for Platinum?)
4. Always use "mls qos trust dscp" on non-HREAP AP ports
Use "mls qos trust dscp" on HREAP AP ports, if you want to preserve upstream DSCP for locally switched WLANs
Use "mls qos trust cos" on HREAP AP ports, if you want to QoS profile 802.1p to override upstream DSCP for locally switched WLANs
5. Use either "mls qos trust dscp" or "mls qos trust cos" on switch-to-switch trunks

Are these statements correct ?
1. If using QoS profile without setting "wired qos protocol", always use "mls qos trust dscp" on the WLC trunk port
- downstream wmm traffic will be policed down to "?" (this one I'm not sure, is it "not policed" or "policed down to cos 6 for platinum, etc")
Ans: Not sure about always. you can use both 'mls qos trust dscp' and 'mls qos trust cos'. Since it is a trunk port the packets will have a cos value (802.1p tag) and hence you can trust cos. Downstream and upstream traffic both are capped to the WLAN max QoS value. for example if Wlan is set to silver, and if a packet comes in at platinum QoS, the AP will cap it to silver in upstream direction. Same holds true for a cos 5 / dscp 46 packet coming in from the wired side.
2. If using QoS profile with setting "wired qos protocol",
- use "mls qos trust cos" on the WLC trunk port if you want outgoing LWAPP traffic COS/DSCP to reflect QoS profile setting and if you want to rewrite DSCP in the outgoing upstream traffic to QoS profile setting
- use "mls qos trust dscp" on the WLC trunk port if you want LWAPP traffic COS/DSCP to reflect original DSCP setting and if you want to leave DSCP alone in the outgoing upstream traffic
Ans:
3. With either "mls qos trust cos" or "mls qos trust dscp" on WLC trunk port, downstream wmm traffic will be policed down to "wired qos protocol" setting (What if "wired qos protocol" is not set, will it be policed down to, for example, cos 6 for Platinum?)
Ans: Traffic in both direction wil always get capped to WLAN max QoS. Untagged (802.1p = 0) traffic will be treated as best effort.
4. Always use "mls qos trust dscp" on non-HREAP AP ports
Use "mls qos trust dscp" on HREAP AP ports, if you want to preserve upstream DSCP for locally switched WLANs
Use "mls qos trust cos" on HREAP AP ports, if you want to QoS profile 802.1p to override upstream DSCP for locally switched WLANs
Ans:
5. Use either "mls qos trust dscp" or "mls qos trust cos" on switch-to-switch trunks
Ans: I think on purely layer 2 switches you can trust dscp, but am not 100% sure.

QoS trust dscp or cos on catalyst 4500

We have a 4510R with Cisco IOS Software, IOS-XE Software, Catalyst 4500 L3 Switch Software cat4500e-UNIVERSALK9-M), Version 03.05.02.E RELEASE SOFTWARE (fc1).
I want use qos trust dscp or qos trust cos on the interface conected to other cisco switch or wlan controller.
The current IOS version, do not support qos trust dscp:
SW(config)#interface gi10/16
SW(config-if)#qos tr
SW(config-if)#qos trust ?
device trusted device class
extend Extend trust through a connected device
SW(config-if)#qos trust device ?
cisco-phone   Cisco IP Phone
cts           Cisco-telepresence
ip-camera     Cisco video surveillance camera
media-player Cisco Digital Media Player
SW(config-if)#qos trust device
What is the software that I need for this?. I tried with command lookup tool but the cat4500 do not appears.

That is even new for me.
I did a search and found that, now a days you no longer have to provide the Trust DSCP command, it is by default trusted.
Went through this White Paper and excerpts are below:
http://www.cisco.com/c/en/us/products/collateral/switches/catalyst-4500-series-switches/white_paper_c11-539588.html
The answer to your question comes from the following excerpt :-
"Previously supervisor engines relied on “port trust” to classify traffic; however, this does not fall into the MQC CLI construct. MQC provides a more flexible capability, i.e. all traffic is trusted by default, an administrator can change this trust state using a policy map. Another difference is the “internal DSCP” value used within the switch to place packets in the proper queue.
Cisco Catalyst 4500E Supervisor Engines do not use “internal DSCP”; rather, it relies on explicit matching of QoS values using class maps so that packets can be placed in the correct queue.
Also, note that there is no specific priority queue: it is not queue 3 or queue 1. The priority queue is simply configured within a class; therefore, it is not tied to a specific queue. One final difference is that of classification. Cisco Catalyst 4500E Supervisor Engines provide sequential classification rather than parallel. This allows the network administrator to classify traffic at egress based on the ingress markings. These markings can be done unconditionally, using a policer or using a table map. Based on these changes, QoS CLI will now be more contiguous on the Supervisor Engines as it will now have standard Cisco MQC CLI, making configuration management much simpler"
HTH,
Please rate all helpful posts.
Regards

Cat3560 and Trust DSCP Question

Hello,
we have several Cat3560 (IOS12.2.20SE4)as pure Layer-2 Switches in use. At these Switches are IP-Phones via a dot1q trunk connected (cisco and non-cisco Phones). The phones mark their traffic with COS=5 and DSCP=46.
Is it possible to configure a "mls qos trust dscp" at the switch-interfaces with IP-Phones, when the switchports are configured as Layer-2?
Of course the switches should also be able to put the traffic in the different receive and transmit-queues based on the received dscp-value.
We'd like configure QoS over our whole campus area DCSP-based and not CoS based to avoid the effort with the CoS<->DSCP mappings.
Thanks
HL

Hi,
Check if that helps.
http://www.cisco.com/univercd/cc/td/doc/product/lan/cat3560/12220se/3560scg/swqos.htm
HTH, Please rate if it does.
-amit singh

How to trust a device

How can I trust my windows 8 pc

Hi Chineme,
I have already answered your question:
https://social.technet.microsoft.com/Forums/windowsserver/en-US/0984554c-955a-419e-a41c-7f30b7944c4f/establishing-trust-with-windows-8?forum=winservergen#0984554c-955a-419e-a41c-7f30b7944c4f
Let us know if this helps.
Best regards,
Please remember to mark the replies as helpful if they help, or as answers if they answer your question. Please also unmark the answers if they provide no help.
Zach Roberts
Independent Microsoft Community Support Advisor
Disclaimer: I don't work for Microsoft. Any advice given is my own and does not represent Microsoft.
Follow me on Twitter:
@WindowsZach

How do I connect Logitech Z-5500 5.1 speakers with new iMac?

Please help a PC to mac converter. I did a search related to this topic and I am still confused. The articles that were related were archived and so I couldn't post a reply. With that said I need help. I purchased Logitech 5.1 speaker system to hookup with intel-based iMac 24". The speakers came with 3 color-coded RCA cables. This is the same setup as on my Dell, but the Dell had the corresponding color coded inputs, the iMac does not.
My question is how do I get 5.1 setup with iMac, and can this computer support a 5.1 system? I've read on here that people are using optical cables, but the iMac does not have an optical input either.
I appreciate any advise and any hyperlinks to cables or other accessories I need to buy would be appreciated.
Thanks.

When the Toslink to mini-jack digital cable arrives you would set up the 5.1 audio to the system through Audio MIDI Setup; Apps>Utilities>Audio MIDI Setup.
From the Audio MIDI Setup Help menu;
Configuring speakers for multichannel output
If you have a multichannel audio output system, you can select the speaker used to play each channel.
You must be using an audio output system that provides more than two channels of audio output.
Before you start, be sure you have connected the audio devices to your computer, turned them on, if necessary, and installed any software required by the manufacturer.
1. Open Audio MIDI Setup and click Audio Devices.
2. Choose the audio output device from the Properties For pop-up menu and click Configure Speakers.
3. If you are using an interleaved device with more than one audio stream, you can choose the audio streams you want to use with your speaker configuration.
4. If the stream you select provides enough channels for the speakers you are configuring, you cannot select additional streams.
5. Choose the type of output you want to set up from the pop-up menu.
6. For each speaker in the configuration, choose a channel from the pop-up menu below the speaker.
7. To test the configuration and speaker, click the speaker.
8. When you're ready, click OK.
If the speaker doesn't make any sound, make sure it is connected to your audio device correctly and the audio output is not muted.

How many IPSec Tunnels an ASA 5500 series supports

Hi All,
I tried looking in ASA documentations but unable to find out that how many IPSec Tunnels can be terminated to an ASA cluster. I have 5545 running only two IPSec Tunnels so far but need to terminate 18 sites all up and would like to confirm how many tunnels we could terminate? Is there a limitaion to it?
Thanks heaps
Shan

Yes, there is a limit. But its far away from your requirement. On the 5545-X you can terminate 2500 VPN-Peers:
http://www.cisco.com/en/US/prod/collateral/vpndevc/ps6032/ps6094/ps6120/at_a_glance_c45-701635.pdf
Sent from Cisco Technical Support iPad App

How to trust a certificate

Checking the Certificate Manager I find things such as TurkTrust Bilgi, Trust Ges. F. Secherheitssysteme, and so on. These are listed as Builtin Object Token. What is this token? Who are these people? Is there a list somewhere about whether to delete these? Should I just delete anyone I do not recognize?
FireFox 9.01 Mac OS 10.6
Thanks - jos

Hi,
I think the Built-in Object Token is the root certificate store that has a list of root certificates of CAs vetted by Mozilla. Depending on your browsing habits, your region, at least some or many of these would be needed to identify secure sites for you. For eg. when you connect to a banking site or email site you need a way to know that it is the correct site. This is done for you by the CAs. Through some research and trial and error you can delete the unneeded ones. If anything goes wrong, delete the '''cert8.db''' file in [http://kb.mozillazine.org/Profile_folder_-_Firefox your Firefox Profile Folder] and Firefox will load the default settings again and recreate the file.
The thing is, one can either do it oneself to verify secure sites, secure content etc. or entrust an entity (CA - Certificate Authority) to do it for us. In the default case the CA's root certificates do it for us. We can add/delete root CAs, but please bear in mind that root CAs have superpowers.
An alternative is [http://convergence.io/ Convergence.]
[https://wiki.mozilla.org/CA:Glossary CA Glossary.]
[https://developer.mozilla.org/en/Introduction_to_Public-Key_Cryptography Public Key Cryptography]

How to trust an untrusted computer on touch 4?

well, yesterday i was connecting it to my ipod and clicked untrust on accident. i have been looking for a solution but everything i look at doesnt work, whn i press the on/off button with the home button it takes a picture, and when i reset my ipod and rstart the computer it still wont trust the computer. I dont know what to do. plase help me through this i really need to d something with my ipod ASAP. PLEASE HELP!!!!

Additional Information
Note: If you select Trust, the computer will be trusted indefinitely. If you select Don't Trust, you will be asked if you want to trust that computer each time you connect your device to that computer.
From:
iOS: 'Trust This Computer' alert

How to trust DSCP on 3Com 5500

Similar Messages

Maybe you are looking for