Mapping DSCP to Inner VLAN (QinQ)

Hi,
I am trying to achieve to following scenario. Basically I have Q-in-Q with DSCP tagged - vlans which I am trying to map to specific inner vlans, trying to eliminate as much as possible the subinterfaces burden.
Any piece of advice- what types of routers DO support this and what could be a possible configuration.
Thanks in advance!

Hi Andreas,
no you cannot do that... on switch 2 you need to have an interface terminating your QinQ tunnel with metro vlan ID 1000.
If you want to make vlan 20 untagged you might want to configure it as the native vlan in the incoming trunk on the CE switch (the trunk facing Gi0/1 of switch 1). QinQ also encapsulates untagged traffic meaning that after the metro tag gets removed the frame won't have any dot1q tag.
If you need more control on dot1q tags you might want to explore the fascinating world of EVC which is not available on Me3400 though (it is available on ES20/ES+ cards for 7600 routers).
For more info on QinQ on Me3400 I suggest you to check the config guide
http://www.cisco.com/en/US/docs/switches/metro/me3400/software/release/12.2_55_se/configuration/guide/swtunnel.html
cheers,
Riccardo

Similar Messages

Flexconnect static mapping of WLAN to VLAN

5508 running 7.4
I want to create a definition for a particular site that maps WLANs (SSIDs) to switched VLANs. I know that I can go to Wireless => Select AP => VLAN mappings on an individual AP basis. But is there a way to create a group that will do this? I thought it could be done with flexconnect groups but I just could not find a way to make it happen there. Then I ran across this Architecting Network for Branch Offices with Cisco Unified Wireless Cisco Live presentation:
http://d2zmdbbm9feqrf.cloudfront.net/2013/usa/pdf/BRKEWN-2016.pdf
And on page 28 it states:
AP groups give the ability to statically map Wi-Fi service (WLAN) to VLAN based on physical location
And it then goes on to give a Configuration/VLAN mapping example in which I fail to see where VLANs are mentioned at all.
Is what I am trying to do possible?
Thanks,
-JEff

Hi Scott, thanks for the reply
I have a main campus with several different distribution blocks that each use unique VLAN IDs. And I have about a dozen remote sites that will all use common VLAN IDs. I am configuring a single SSID (WLAN 2) to be used across all of these locations. So at my main campus building "A" will have WLAN 2 mapped to VLAN 55 while building "B" will have WLAN 2 mapped to VLAN 65. At each of the remote sites WLAN 2 needs to be maped to VLAN 15.
So let's say I want to configure the main campus buildings A and B. I create a dynamic interface for vlan 55 and name it something creative like vlan-55, Likewise for vlan 65. Then I create an AP group named APG-55, add WLAN 2 to it and add all of my APs in that buliding. What I don't understand is where the dynamic interface comes into play. From your explanation it would seem that I need to assoiciate the dynamic interface to an AP group somehow. What am I missing?
Thanks!
-Jeff

Can't apply policy route-map on C3750 stack vlan interface

Hi All.
I've come up with this problem and i could see some people have had the same issue. I've tried to overlook and check other replies but it didn't help me. So I'm hoping someone could spot the problem. Here are the details:
2 x WS-C3750G-24T-E in stack
Cisco IOS Software, C3750 Software (C3750-ADVIPSERVICESK9-M), Version 12.2(46)SE, RELEASE SOFTWARE (fc2)
switch#sh sdm prefe
The current template is "desktop IPv4 and IPv6 routing" template.
The selected template optimizes the resources in
the switch to support this level of features for
8 routed interfaces and 1024 VLANs.
number of unicast mac addresses:                  1.5K
number of IPv4 IGMP groups + multicast routes:    1K
number of IPv4 unicast routes:                    2.75K
    number of directly-connected IPv4 hosts:        1.5K
    number of indirect IPv4 routes:                 1.25K
number of IPv6 multicast groups:                  1.125k
number of directly-connected IPv6 addresses:      1.5K
number of indirect IPv6 unicast routes:           1.25K
number of IPv4 policy based routing aces:         0.25K
number of IPv4/MAC qos aces:                      0.5K
number of IPv4/MAC security aces:                 0.5K
number of IPv6 policy based routing aces:         0.25K
number of IPv6 qos aces:                          0.5K
number of IPv6 security aces:                     0.5K
There are 2 ISPs, G1/0/1 and G2/0/1. After creating a route-map i can apply a policy route-map to Vlan5 and it accepts without any errors. But when you do sh run vlan5 the command is not there, it's not applied.
Any help will be appretiated.
Thanks.

Hi Jon.
Thanks for your reply. I didn't put those configs as they're basic without use of VRF and WCCP. Also i've checked or tried to find the list of unsupported commands and didn't see them in that list. See config below with some extras:
track 11 rtr 1 reachability
track 22 rtr 2 reachability
ip routing
no ip dhcp use vrf connected
interface GigabitEthernet1/0/1
description ISP1
no switchport
ip address 9.9.9.2 255.255.255.252
no ip proxy-arp
no ip mroute-cache
speed 100
duplex full
ipv6 address 2B01:4B8:0:3::2/64
ipv6 ospf 1 area 0
no mdix auto
no cdp enable
interface GigabitEthernet2/0/1
description ISP2
no switchport
ip address 9.9.9.5 255.255.255.252
ip ospf cost 10000
speed 1000
duplex full
ipv6 address 2B01:4B8:0:7::2/64
ipv6 enable
ipv6 ospf cost 10000
ipv6 ospf 1 area 0
interface Vlan5
description Company Ext Subnet
ip address 9.9.8.1 255.255.255.128
no ip proxy-arp
no ip mroute-cache
ipv6 address 2B01:4B8:1:22::1/64
ipv6 ospf 1 area 15
access-list 111 permit tcp any any eq www
route-map pbr1 permit 10
match ip address 111
set interface GigabitEthernet2/0/1 GigabitEthernet1/0/1
route-map pbr1 permit 20
set interface GigabitEthernet1/0/1 GigabitEthernet2/0/1
route-map pbr2 permit 10
match ip address 111
set ip next-hop verify-availability 9.9.9.6 1 track 11
set ip next-hop 9.9.9.1
route-map pbr2 permit 20
set ip next-hop verify-availability 9.9.9.1 1 track 22
set ip next-hop 9.9.9.6
I've tried to apply both policies pbr1 and pbr2, it allowed to do that without errors but at the end it wasn't there.
Cheers,

Question about 3750 mls qos map dscp-output-q and cos-output-q

1. If a egress packet has both Cos and Dscp setting, which map should this packet used to put into queue?
2. The 3750 is doing ip route. After the packet is routed, will the packet keep the DSCP and COS? Or it will just keep the DSCP and using the dscp-cos map to create a new COS.

Apologies for the confusion with the terminalogy.
The question is where you have configured the trust boundaries, do you necessarily trust the DSCP value prior to being routed across your network?
Therefore, although you have explicity trusted the DSCP value, do you still trust the value at the remote peer.
For example, you connect into an MPLS with QoS enabled, you know that the values you are trusting are correct within your network, however at the remote peer/branch they could be remarked by the provider. Therefore do you 'believe' the values, or do you simply not trust them and then reclassify on ingress.
Regards
Allan.
Hope this makes sense..

QInQ - port mapping on one switch

Hello,
I have three remote site connected by VC EoMPLS.
Every vc is mapped in a S-VLAN QinQ .
I want use one switch to do forwarding the trafic of site central to remote site and remote site to remote site.
See to drawing .pdf.
Testing the solution is ok but i see your opinion.
Thanks a lot,
André Auvinet

Hi André,
I've done this type of solution in my lab before as well. I've seen it just a few times in production too. I don't know if this would be considered a "recommended" design but overall it should work.

VLAN Map

Does anyone know if VLAN Maps are supported in CAT OS? I have found that they are supported in the 3550, 4500, and 6509 running IOS but would like to know ALL of the devices they are supported in.
Thanks for the help,
Brian

I don't think vlan maps are availble on Catalyst OS Switches. On Catalyst IOS Switches, the vlan access-map global configuration command is used on the switch stack or on a standalone switch to create or modify a VLAN map entry for VLAN packet filtering. This entry changes the mode to the VLAN access-map configuration. The vlan filter interface configuration command is used to apply a VLAN map to one or more VLANs.
on Catalyst OS Switches, the set vlan mapping command is used to map 802.1Q VLANs to ISL VLANs.

HREAP VLAN Mapping

/* Style Definitions */
table.MsoNormalTable
{mso-style-name:"Table Normal";
mso-tstyle-rowband-size:0;
mso-tstyle-colband-size:0;
mso-style-noshow:yes;
mso-style-priority:99;
mso-style-parent:"";
mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
mso-para-margin-top:0cm;
mso-para-margin-right:0cm;
mso-para-margin-bottom:10.0pt;
mso-para-margin-left:0cm;
line-height:115%;
mso-pagination:widow-orphan;
font-size:11.0pt;
font-family:"Calibri","sans-serif";
mso-ascii-font-family:Calibri;
mso-ascii-theme-font:minor-latin;
mso-hansi-font-family:Calibri;
mso-hansi-theme-font:minor-latin;
mso-bidi-font-family:"Times New Roman";
mso-bidi-theme-font:minor-bidi;
mso-fareast-language:EN-US;}
Hi,
I've searched around to see if someone else has experienced the same issue regarding HREAP AP's losing their VLAN mappings; however I could not find any related topics.
Scenario
I've got a 5508 WLC running ver 7.0 with local VLANs assigned as follow:
VLAN 241 - Data Users
VLAN 253 - Voice Users
The HREAP AP's (Cisco 1242AG) running at the remote branches is mapped to the following:
VLAN 2 - Data Users
VLAN 253 - Voice
The Problem...
HREAP works perfect; users get the local DHCP addresses at the branch office and have no issues with connectivity. Once and a while some of the HREAP AP's will lose the VLAN mapping I've assigned to them. In this case I've mapped VLAN 2 to the SSID for the Data Users, I will get complaints that users can't connect to the network when I go check the HREAP AP's VLAN mapping it defaulted back to VLAN 241 (the same VLAN the local AP's at head office use for the same SSID). Of course with the Voice SSID I don't have this problem as it's using the same VLAN ID as head office.
Once I've corrected the mapping everything works perfect.
Why...
I just want to know why this happens, I've rebooted the AP's to see if they retain the mappings and they did. I've seen in the HREAP design deployment that it is preferred to use the same VLAN ID's of the head office where the WLC is located as for the same to the branch offices where the HREAP AP's are located.
I can see why as this will resolve my problem, however this network was designed without the knowledge of HREAP being deployed to the remote sites and I would like to minimize change from a LAN perspective.
Will this be my only solution by standardizing the branch office VLAN ID's the same as the head office network or should I be able to use different VLAN ID's for the branch offices?
Thanks for your time reading this and for your input. If you know any discussion regarding this, please add the url.
Regards
Jurgens

Hi,
I'm having the same problem. And I have two WLCs (WISM) with 7.0.220 version.
I think because of this BUG: http://tools.cisco.com/Support/BugToolKit/search/getBugDetails.do?method=fetchBugDetails&bugId=CSCtw92394&from=summary
Anyone knows how can I solve this problem?
I Have 42 HREAP APs, and when I have some link problem on the remote Branch and the AP lose for a few seconds Connectivity to the 1º Controller its loses the VLAN Mappings (all turned to the Native VLAN).

Is it possible to configure non-default NX7K CoS-DSCP map?

NX7K QoS has system defined table maps for CoS to DSCP mapping, DSCP to CoS mapping, etc. Those table maps can be used in qos policy maps. I was wondering if I can change, for example, CoS to DSCP mapping to something different from the default values.
Somthing similar to Catalyst switch command "mls qos map cos-dscp 0 10 18 24 34 46 48 56", where you can define any CoS to DSCP values. I don't think this is possible in NX7K QoS, but just curious.
Thanks
Gary

Hi Raymond,
Based on my research, we can use Group Policy and Internet Options to configure default mail client.
How to make Outlook the default mail client
http://support.microsoft.com/kb/223877/en-us
How to configure the default e-mail client using Group Policy
http://support.microsoft.com/kb/2008044
Best Regards,
Amy
Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]

How Do VLANs Map to SSIDs in Wireless?

So the title really says it all. I'm working on my CCDA and I can't really find anything on this in the official book. Does the LWAP just broadcast multiple SSIDs and depending on which one you connect to it maps the user to a different VLAN?
I also saw a best practice statement that said, "Each wireless client authentication type should map to a unique SSID which in turn maps to a unique VLAN"
I thought that was a bit confusing? How can you authenticate if you aren't already connected to a specific SSID?

So I dug through Cisco's official text and found the answer to my own question.
For the first part, yes, you just broadcast multiple SSIDs and they each map back to a specific VLAN.
The statement I read was misleading. The user first selects an SSID and then authenticates based on that SSID's chosen authentication type. The SSID isn't selected based on the authentication type used by the mobile device.

C2960: ingress priority-queue and CoS/DSCP mapping

I have read the C2960 manuals for a few times, but I don't seem to find an answer.
You can enable the priority queue on the ingress interface which has two available input queues for QoS-services.
What seems to be missing from the manuals is that how can I map/direct the traffic (CoS & DSCP values) to the priority queue?
I can map traffic to two other WRR (SRR) queues with command: "mls qos srr-queue input cos-map queue queue-id threshold threshold-id cos1...cos8", but there is nothing about the priority queue.
So is the CoS/DSCP values for the priority queue fixed or how/what traffic is directed to it?
Thanks,
Miska

What seems to be missing from the manuals is that how can I map/direct the traffic (CoS & DSCP values) to the priority queue?
A: By default, the priority queue is queue 2, and 10 percent of the bandwidth is allocated to it.
?For queue-id, the range is 1 to 2.
Map DSCP or CoS values to an ingress queue and to a threshold ID.
By default, DSCP values 0-39 and 48-63 are mapped to queue 1 and threshold 1. DSCP values 40-47 are mapped to queue 2 and threshold 1.
By default, CoS values 0-4, 6, and 7 are mapped to queue 1 and threshold 1. CoS value 5 is mapped to queue 2 and threshold 1.
?For queue-id, the range is 1 to 2.
?For threshold-id, the range is 1 to 3. The drop-threshold percentage for threshold 3 is predefined. It is set to the queue-full state.
?For dscp1...dscp8, enter up to eight values, and separate each value with a space. The range is 0 to 63.
?For cos1...cos8, enter up to eight values, and separate each value with a space. The range is 0 to 7.
What above is saying is queue 2 is priority queue, you can use the CoS/DSCP mapping to queue to move certain CoS?DSCP to either queue 1 or queue 2.
I can map traffic to two other WRR (SRR) queues with command: "mls qos srr-queue input cos-map queue queue-id threshold threshold-id cos1...cos8", but there is nothing about the priority queue.
So is the CoS/DSCP values for the priority queue fixed or how/what traffic is directed to it?
A; See above.
For more info:
http://www.cisco.com/univercd/cc/td/doc/product/lan/cat2960/12225see/scg/swqos.htm#wp1161845
Please rate all posts.

DSCP to CoS mapping: Avaya traffic

It appears that Avaya marks its voice traffic as follows:
L2 signaling cos 6 L3 signaling dscp 34
L2 audio cod 6 L3 audio dscp 46
Has anyone interacted with theses settings and what are the right mappings for 6500 series Modules?
I am about to use the following:
#mls qos map dscp-cos 34 46 to 6
#mls qos map dscp-cos 48 to 5 "move IP control to cos 5)
#mls qos map cos-dscp 0 8 16 24 32 46 48 56 leave cos to dscp unchanged.
Finally use: #mls qos thrust dscp on input interfaces.
Can anyone clarify?
Thanks.

The 6608 and 6624 internal port is treated as trust-cos to the Catalyst 6000. So the default COS-to-DSCP mapping of the cards will determine the DSCP values with which the IP packets are marked unless they are changed in the switch.
The 6608 and 6624 will tag packets as follows:
COS = 5 for rtp traffic
COS = 3 for signalling traffic
By default on the Catalyst 6000, these COS values map in IP packets to DSCP 24 (COS = 3) and 40 (COS = 5) as shown in the table below.
Generally, the recommended DSCP values to use in a VoIP network differ slightly. They are:
DSCP = 46 for rtp traffic (Recommended Expedited Forwarding (EF) value)
COS = 26 for signalling traffic (AF31)
It may be necessary to change the default COS-DSCP mapping on the Catalyst 6000 so that the DSCP markings in packets generated by the 6608 and 6624 cards conform to the network policy. For example, if other devices in the network are marking packets with the recommended values.
Information on how to change the default COS-DSCP mapping is provided in the Mapping Received CoS Values to Internal DSCP Values section of Catalyst 6000 Family Software Configuration Guide.

SG 300-10 . Mapping fiber to ethernet ports (vlans?)...

Hi,
the incoming fiber on ports 9 and 10 are on different subnets. I need to map the subnet on port 9 to ethernet ports 1-9 and port 10 is on its own. I have the device IPv4 address set to a static address on the same subnet as port 9. I don't know if there's an easier approach, but I attempted to map the ports using vlans (please see the attached screenshots). We don't yet have the fiber link established for port 10, so I haven't had a chance to test, but I wanted to confirm that my configuration is sound. I used the default vlan for ports 1-9, because I need to manage through that subnet. I added vlan 10 for port 10, but I don't know if I have it configured correctly... Please advise. Thanks..!

Hi Greg,
Fiber ethernet is most likely running at 1000Mbits/sec and any Copper Ethernet interfaces on the switch runs at 1000Mbit/sec. personally the only differentiation I make between the copper or fiber are the distances they can run.
I love your screen captures it shows me that ports 1-9 are untagged in VLAN 1 (default VLAN) and port 10 is untagged in VLAN 10.
It tells me that both fiber runs are running untagged Ethernet frames on both fiber runs.
You have associated a IP address onto VLAN1 so you can manage the switch.
but the next question is;
What are you trying to achieve ?
regards Dave

DSCP and CoS mapping to use uAPSD

Hi CISCO experts, I'm trying to map some traffic to a DSCP and CoS priority. The fact is that doesn't work.
Steps:
1.Set personal filter (myfilter)to forward from specific IP.
2.Set QoS policy: my_policy --> myfilter-CoS (4).
3. Add policy to 802.11g.
When I look up the IP traces DSCP is allways 0x00 (Best Efford).
If I map DSCP (best efford) to DSCP (vocie) doesnt work either.
What can I do? Im trying to emulate AC_VO or AC_VE so I can force the uAPSD protocol to work.
Best regards

Are you using a Cisco WLAN controller or autonomous AP?
You would need to ensure that the RTP (voice) packets to the AP has DSCP = EF.
There is an auto policy in the WLAN controller to map EF to UP6.
For autonomous, will need to create a QoS policy to do this.
But you do not want to map DSCP = 0 to UP6!
This defeats the purpose.
Will only want RTP packets to be marked as EF.
See the WLAN SRND and 7921G Deployment Guides for more info.
http://www.cisco.com/application/pdf/en/us/guest/netsol/ns279/c649/ccmigration_09186a00808d9330.pdf
http://www.cisco.com/en/US/docs/voice_ip_comm/cuipph/7921g/5_0/english/install/guide/7921dply.pdf

Route map does not applied on interface vlan

Hi all,
could you pls tell me why i can't apply a route-map on an interface vlan,
belown my config:
SWBBO(config-if)#ip policy route-map TEST
                           ^
% Invalid input detected at '^' marker.
Cisco IOS Software, C3750E Software (C3750E-UNIVERSALK9-M), Version 15.0(2)SE1, RELEASE SOFTWARE (fc1)
Technical Support: http://www.cisco.com/techsupport
Copyright (c) 1986-2013 by Cisco Systems, Inc.
Compiled Fri 04-Jan-13 01:38 by prod_rel_team
ROM: Bootstrap program is C3750E boot loader
BOOTLDR: C3750E Boot Loader (C3750X-HBOOT-M) Version 12.2(53r)SE2, RELEASE SOFTWARE (fc1)
BBWMASALE01 uptime is 40 weeks, 1 day, 6 minutes
System returned to ROM by power-on
System restarted at 22:12:07 UTC Mon Feb 18 2013
System image file is "flash:/c3750e-universalk9-mz.150-2.SE1.bin"
Best regards,
James

Hi jon,
belown the result of sh sdm prefer,so need i a licence ip service to apply the route-maap on the interface vlan,or just entrer the config"sdm prefer routing" and reboot the switch?
SWBB0#sh sdm prefer
The current template is "desktop default" template.
The selected template optimizes the resources in
the switch to support this level of features for
8 routed interfaces and 1024 VLANs.
number of unicast mac addresses:                  6K
number of IPv4 IGMP groups + multicast routes:    1K
number of IPv4 unicast routes:                    8K
    number of directly-connected IPv4 hosts:        6K
    number of indirect IPv4 routes:                 2K
number of IPv6 multicast groups:                  64
number of directly-connected IPv6 addresses:      74
number of indirect IPv6 unicast routes:           32
number of IPv4 policy based routing aces:         0
number of IPv4/MAC qos aces:                      0.5K
number of IPv4/MAC security aces:                 0.875k
number of IPv6 policy based routing aces:         0
number of IPv6 qos aces:                          0
number of IPv6 security aces:                     60

Policy-map input on an interface VLAN

Hi there,
I have a problem with a policy-map on an interface VLAN on my Cisco 6509-E.
The switch has the IOS Version 12.2(33)SXI10, RELEASE SOFTWARE (fc2).
I have configured this policy-map:
policy-map PM-10Mbit
class class-default
   police cir 10000000 bc 1875000 be 3750000    conform-action transmit     exceed-action drop     violate-action drop
I bind this map on a physical interface
interface GigabitEthernet2/2
description <removed>
ip vrf forwarding <removed>
ip address <removed>
ip access-group <removed> out
service-policy input PM-10Mbit
service-policy output PM-10Mbit
and get this result:
show policy-map interface
GigabitEthernet2/2
Service-policy input: PM-10Mbit
    class-map: class-default (match-any)
      Match: any
      police :
        10000000 bps 1875000 limit 1875000 extended limit
      Earl in slot 5 :
        6428065284 bytes
        5 minute offered rate 14696 bps
        aggregate-forwarded 6294160565 bytes action: transmit
        exceeded 133904719 bytes action: drop
        aggregate-forward 584 bps exceed 0 bps
Service-policy output: PM-10Mbit
    class-map: class-default (match-any)
      Match: any
      police :
        10000000 bps 1875000 limit 1875000 extended limit
      Earl in slot 4 :
        10335145381 bytes
        5 minute offered rate 21536 bps
        aggregate-forwarded 10142894661 bytes action: transmit
        exceeded 192250720 bytes action: drop
        aggregate-forward 128 bps exceed 0 bps
      Earl in slot 5 :
        263335780 bytes
        5 minute offered rate 176 bps
        aggregate-forwarded 263335780 bytes action: transmit
        exceeded 0 bytes action: drop
        aggregate-forward 448 bps exceed 0 bps
But when I bind it on an interface VLAN i see no incoming traffic:
show policy-map interface
Vlan1012
Service-policy input: PM-100Mbit
    class-map: class-default (match-any)
      Match: any
      police :
        100000000 bps 18750000 limit 18750000 extended limit
      Earl in slot 4 :
        0 bytes
        30 second offered rate 0 bps
        aggregate-forwarded 0 bytes action: transmit
        exceeded 0 bytes action: drop
        aggregate-forward 0 bps exceed 0 bps
      Earl in slot 5 :
        0 bytes
        30 second offered rate 0 bps
        aggregate-forwarded 0 bytes action: transmit
        exceeded 0 bytes action: drop
        aggregate-forward 0 bps exceed 0 bps
Service-policy output: PM-100Mbit
    class-map: class-default (match-any)
      Match: any
      police :
        100000000 bps 18750000 limit 18750000 extended limit
      Earl in slot 4 :
        1005376843668 bytes
        30 second offered rate 33016448 bps
        aggregate-forwarded 1005362388151 bytes action: transmit
        exceeded 14455517 bytes action: drop
        aggregate-forward 30943792 bps exceed 0 bps
      Earl in slot 5 :
        1828318775 bytes
        30 second offered rate 1296 bps
        aggregate-forwarded 1828318775 bytes action: transmit
        exceeded 0 bytes action: drop
        aggregate-forward 1272 bps exceed 0 bps
Is this a bug or am I doing something wrong here?

Hello
As I understand it , this is command is required in mls qos because on a SVI ( L3 vlan interface) runs in a vlan-based mode which differs from normal L3 routed interfaces which run in interface mode.
As per cisco ="In VLAN-based mode, the policy map that is attached to the Layer 2 interface is ignored, and QoS is driven by the policy map that is attached to the corresponding VLAN interface."
Lastly regards
Try matching on all traffic incoming on the trunk interface on that switch for it to successfully police incoming traffic:
class-map V102
match input-interface x/x
Policy-map POLICE
class V102
Police xxxx xxxx
res
Paul

Mapping DSCP to Inner VLAN (QinQ)

Similar Messages

Maybe you are looking for