QoS trust dscp or cos on catalyst 4500

We have a 4510R with Cisco IOS Software, IOS-XE Software, Catalyst 4500 L3 Switch Software cat4500e-UNIVERSALK9-M), Version 03.05.02.E RELEASE SOFTWARE (fc1).
I want use qos trust dscp or qos trust cos on the interface conected to other cisco switch or wlan controller.
The current IOS version, do not support qos trust dscp:
SW(config)#interface gi10/16
SW(config-if)#qos tr
SW(config-if)#qos trust ?
  device  trusted device class
  extend  Extend trust through a connected device
SW(config-if)#qos trust device ?
  cisco-phone   Cisco IP Phone
  cts           Cisco-telepresence
  ip-camera     Cisco video surveillance camera
  media-player  Cisco Digital Media Player
SW(config-if)#qos trust device
What is the software that I need for this?. I tried with command lookup tool but the cat4500 do not appears.

That is even new for me.
I did a search and found that, now a days you no longer have to provide the Trust DSCP command, it is by default trusted.
Went through this White Paper and excerpts are below:
http://www.cisco.com/c/en/us/products/collateral/switches/catalyst-4500-series-switches/white_paper_c11-539588.html
The answer to your question comes from the following excerpt :-
"Previously supervisor engines relied on “port trust” to classify traffic; however, this does not fall into the MQC CLI construct. MQC provides a more flexible capability, i.e. all traffic is trusted by default, an administrator can change this trust state using a policy map. Another difference is the “internal DSCP” value used within the switch to place packets in the proper queue.
Cisco Catalyst 4500E Supervisor Engines do not use “internal DSCP”; rather, it relies on explicit matching of QoS values using class maps so that packets can be placed in the correct queue.
Also, note that there is no specific priority queue: it is not queue 3 or queue 1. The priority queue is simply configured within a class; therefore, it is not tied to a specific queue. One final difference is that of classification. Cisco Catalyst 4500E Supervisor Engines provide sequential classification rather than parallel. This allows the network administrator to classify traffic at egress based on the ingress markings. These markings can be done unconditionally, using a policer or using a table map. Based on these changes, QoS CLI will now be more contiguous on the Supervisor Engines as it will now have standard Cisco MQC CLI, making configuration management much simpler"
HTH,
Please rate all helpful posts.
Regards

Similar Messages

  • Qos trust cos or qos trust dscp?

    My core switches are a pair Cisco catalyst 4006s with a sup 4 module. The questions are:
    1. Should I use qos trust cos or qos trust dscp when setting up qos on a per port basis?
    2. Which is preferred?
    3. I have a cos to dscp mapping so does it really matter?
    Any help is greatly appreciated. I just want to make sure that I'm honoring all tags.
    Mark

    If you have ip phones connected to the switch, you can enter qos trust cos on the switch and in the router which is connected to the switch enter the command to trust the DSCP since the switch will pass the dscp information to teh router.
    http://www.cisco.com/en/US/docs/ios/qos/command/reference/qos_m2.html#wp1015945

  • "mls qos trust dscp" vs. "mls qos trust cos"

    Are these statements correct ?
    1. If using QoS profile without setting "wired qos protocol", always use "mls qos trust dscp" on the WLC trunk port
    - downstream wmm traffic will be policed down to "?" (this one I'm not sure, is it "not policed" or "policed down to cos 6 for platinum, etc")
    2. If using QoS profile with setting "wired qos protocol",
    - use "mls qos trust cos" on the WLC trunk port if you want outgoing LWAPP traffic COS/DSCP to reflect QoS profile setting and if you want to rewrite DSCP in the outgoing upstream traffic to QoS profile setting
    - use "mls qos trust dscp" on the WLC trunk port if you want LWAPP traffic COS/DSCP to reflect original DSCP setting and if you want to leave DSCP alone in the outgoing upstream traffic
    3. With either "mls qos trust cos" or "mls qos trust dscp" on WLC trunk port, downstream wmm traffic will be policed down to "wired qos protocol" setting (What if "wired qos protocol" is not set, will it be policed down to, for example, cos 6 for Platinum?)
    4. Always use "mls qos trust dscp" on non-HREAP AP ports
    Use "mls qos trust dscp" on HREAP AP ports, if you want to preserve upstream DSCP for locally switched WLANs
    Use "mls qos trust cos" on HREAP AP ports, if you want to QoS profile 802.1p to override upstream DSCP for locally switched WLANs
    5. Use either "mls qos trust dscp" or "mls qos trust cos" on switch-to-switch trunks

    Are these statements correct ?
    1. If using QoS profile without setting "wired qos protocol", always use "mls qos trust dscp" on the WLC trunk port
      - downstream wmm traffic will be policed down to "?" (this one I'm not sure, is it "not policed" or "policed down to cos 6 for platinum, etc")
    Ans: Not sure about always. you can use both 'mls qos trust dscp' and 'mls qos trust cos'. Since it is a trunk port the packets will have a cos value (802.1p tag) and hence you can trust cos. Downstream and upstream traffic both are capped to the WLAN max QoS value. for example if Wlan is set to silver, and if a packet comes in at platinum QoS, the AP will cap it to silver in upstream direction. Same holds true for a cos 5 / dscp 46 packet coming in from the wired side.
    2. If using QoS profile with setting "wired qos protocol",
      - use "mls qos trust cos" on the WLC trunk port if you want outgoing LWAPP traffic COS/DSCP to reflect QoS profile setting and if you want to rewrite DSCP in the outgoing upstream traffic to QoS profile setting
      - use "mls qos trust dscp" on the WLC trunk port if you want LWAPP traffic COS/DSCP to reflect original DSCP setting and if you want to leave DSCP alone in the outgoing upstream traffic
    Ans:
    3. With either "mls qos trust cos" or "mls qos trust dscp" on WLC trunk port, downstream wmm traffic will be policed down to "wired qos protocol" setting (What if "wired qos protocol" is not set, will it be policed down to, for example, cos 6 for Platinum?)
    Ans: Traffic in both direction wil always get capped to WLAN max QoS. Untagged (802.1p = 0) traffic will be treated as best effort.
    4. Always use "mls qos trust dscp" on non-HREAP AP ports
       Use "mls qos trust dscp" on HREAP AP ports, if you want to preserve upstream DSCP for locally switched WLANs
       Use "mls qos trust cos" on HREAP AP ports, if you want to QoS profile 802.1p to override upstream DSCP for locally switched WLANs
    Ans:
    5. Use either "mls qos trust dscp" or "mls qos trust cos" on switch-to-switch trunks
    Ans: I think on purely layer 2 switches you can trust dscp, but am not 100% sure.

  • QoS - can u trust dscp and cos?

    Hello,
    is it possible to trust DSCP and COS at the same time?
    If so, which one wins?

    G'day,
    It does not really make sense to trust both DSCP and CoS at the same time. You configure your switch to trust one or none of these.
    As an example, if you did have the capability to trust both DSCP and CoS, imagine what would happen if you received a frame with DSCP EF and CoS 0 ? You would be faced with a conflicting situation ... if you trusted CoS, you would give a potentially high-priority packet lesser service. Whereas if you trusted DSCP, you could end up giving a potentially low-priority packet voice-like service... So the option of trusting both is not allowed.
    Hope that helps - pls rate the post if it does.
    Paresh

  • Cisco 3560 switch| mls qos trust dscp question

    Hi everybody
    Hi everybody .
    Please consider the following example:
    3560 sw f1/1--------trunk---SW2
    3560 sw
    f1/1
    mls qos trust dscp
    3560 is using default cos-dscp map, assume a 3560 receives a frame carrying IP packet on f1/1 with COS 4, what will 3560 switch do?
    1) will it use its default cos --dscp map  ( cos 4--.dscp 32) and rewrite 32 in dscp field  of the packet in the frame and provide PHB for dscp 32 ?
    Much appreciated!!
    Have  a great weekend.

    Hi
    No it will not trust the cos value, because You have configured to trust dcsp. So, the switch will trust the dcsp value in the incoming frame.
    /Mikael

  • Why does mls qos trust dscp dissapear after reboot?

    The command takes but after reboot, Invlaid inputs detected show up and "mls qos tust dscp" is gone from every interface.
    Happens on both 2960-24PC-S / 2960-48PST-S switches.

    Hi,
    thanks for your reply.
    mls qos
    interface GigabitEthernet3/34
    description *** DATA VLAN 35 - VOICE VLAN 34 ***
    switchport
    switchport trunk native vlan 36
    switchport trunk allowed vlan 34,36
    switchport mode trunk
    mls qos trust dscp
    no cdp enable
    spanning-tree portfast trunk
    If i don't include the global 'mls qos' command then the voice packets keep the dscp 46 value.  If I add the mls qos command this causes the switch to set the dscp values to zero.
    Thanks again 
    ps.  there are some other mls commands on the switch... i don't know if these could interfere but they were already on there so i'm reluctant to remove them..

  • Mls qos trust dscp??? is setting my DSCP values to zero!?

    Hi,
    I was just doing some testing to ensure that the command 'mls qos trust dscp' is working on my 6509 switches before rolling out QoS.
    Before adding any configuration I could see using wireshark that traffic from my Avaya 9608 handset was coming through with a DSCP value of 46 (as it is supposed to).
    I then added the command 'mls qos' (at global level)
    on examining the wireshark output this time, the DSCP value had been set to zero (i.e. it defaulted it to best effort)
    I then expected by adding the commmand 'mls qos trust dscp' on the interface the phone is connected to that the DSCP value would would again be left alone?
    does anybody know why this is happening?
    Many thanks in advance.
    Andy

    Hi,
    thanks for your reply.
    mls qos
    interface GigabitEthernet3/34
    description *** DATA VLAN 35 - VOICE VLAN 34 ***
    switchport
    switchport trunk native vlan 36
    switchport trunk allowed vlan 34,36
    switchport mode trunk
    mls qos trust dscp
    no cdp enable
    spanning-tree portfast trunk
    If i don't include the global 'mls qos' command then the voice packets keep the dscp 46 value.  If I add the mls qos command this causes the switch to set the dscp values to zero.
    Thanks again 
    ps.  there are some other mls commands on the switch... i don't know if these could interfere but they were already on there so i'm reluctant to remove them..

  • Mls qos trust{cos/ip-precedence/dscp} command

    Hi every body!
    I have few questions
    1)
    The command " mls qos trust dscp" is only valid on mulilayer switch or it is also valid for layer 2 switch? If layer 2 switch is configured with that command, can it modify the dcsp value based on policy?
    2)is the following correct:
    switch(config-if) mls qos trust dscp
    switch will set the cos value to set default. If the default set is zero, then frame will be processed by best-effort delivery.
    But the egress-queue will be decided by dscp value in the packet. A dscp to cos map will be used to drive the cos value and then frame will be placed in the queue that corresponds to cos value.( off course if egress port is configured for trunk)
    thanks a lot and I wish America and all of you a happy new year!
    thanks a lot!

    Sarah
    1) L2 switches can trust the dscp marking as well. The 2960 is a layer 2 only switch and the default is untrusted but if you then enter
    "mls qos trusted" you have a choice of 'cos|dscp|ip-precedence'. The default if no choice is entered is DSCP.
    2) If "mls qos trust dscp" is entered then the switch will use the DSCP marking found in the packet. This will then be used as the internal DSCP marking that all switches use. Unless you have a DSCP-DSCP mutation map the value used will be the value received in the packet.
    Jon

  • Mls qos trust cos vs mls qos cos in cat6k

    Hello
    I am trying to configure basic qos topology with two 6k connected to each other by the trunk port.
    According to the documentation, if I set the mls qos cos value at the interface level I should modify the default cos on it, and all packets leaving incoming to this port, should be marked with the new cos value.
    http://www.cisco.com/c/en/us/support/docs/switches/catalyst-6000-series-switches/24055-173.html
    Unfortunately, when I set such config, all incoming packets transmitted through this interface was tagged with cos = 0 until I set the "mls qos trust cos" on the same interface.
    Does anybody can explain to me this strange behavior?
    I would like to mention that both 6k was connected to each other with ws-x6548-GE-TX modules.
    Thank you in advance.
    Ragards
    Lukas

    Sarah
    1) L2 switches can trust the dscp marking as well. The 2960 is a layer 2 only switch and the default is untrusted but if you then enter
    "mls qos trusted" you have a choice of 'cos|dscp|ip-precedence'. The default if no choice is entered is DSCP.
    2) If "mls qos trust dscp" is entered then the switch will use the DSCP marking found in the packet. This will then be used as the internal DSCP marking that all switches use. Unless you have a DSCP-DSCP mutation map the value used will be the value received in the packet.
    Jon

  • QoS - DSCP or CoS

    Our Environment: 
    -We have about 200 Polycom VoIP phones (SoundPoint IP335). These phones utilize DSCP - EF. However, CDP is currently disabled by our provider. These phones are 100% cloud managed. Every call, even the internal between two local phones has to go out to the cloud and back.
    -We have 53 Cisco access points AIR-CAP3502I-A-K9 connected to our Cisco WLC-5508 controllers.
    -We have 2960-S stackable access layer switches as well as primary and secondary L2/L3 Core switches WS-C3560E-12D-E. 
    OUR GOALS: 
    1. We would like to implement an End-To-End QoS solution in our environment utilizing the Auto QoS configuration macros for both the Wi-Fi Access Points that use QoS and WiFi Controllers.
    2. We would like to implement an End-To-End QoS solution in our environment utilizing the Auto QoS configuration macros for our VoIP phones.
    Proposed solution:
    1. Enable QoS on ALL switches and ultimately Routers by using :
    mls qos 
    2. On the switchports facing the Access Points use:
    mls qos trust dscp
    3. On the switchport facing the Polycom VoIP phones use:
    auto qos voip trust
    mls qos trust dscp
    4. On the trunks between the access layers switches and our Cores, we would like to use DSCP. Lots of different documentations state to use CoS should be used acrooss layer 2 uplinks and that DSCP should be used across Layer 3 uplinks. However, DSCP is able to pass these layer 2 links without any rewrite by CoS. Trunks between all L2/L3 switches would be configured as follows:
    auto qos voip trust
    mls qos trust dscp
    Questions:
    -is this configuration valid? 
    -Is this design future-proof enough so that it NOT only serves the VoIP traffic in the future but other traffic possible future traffic such as video, and etc.
    -Should we be using CoS vs. DSCP?
    -i noticed that our 2960-S switches have "auto qos srnd4" configured BUT our 
    Core Switches don't. Should this be enabled on the Core switches as well? I noticed that "auto qos srnd4" enabled causes our 2960S switches change the "auto qos voip trust" being displayed in the running configuration as "auto qos trust". Not sure why is this happening. But if you turn off "auto qos srnd4" the command sticks and it is shown properly within the 2060-S running config.
    Thanks.

    Hello.
    I doubt if "auto qos voip trust" would suit you on inter-switch links, as per documentation the command applies policy-map that gives only 320K for voice and signalling traffic (+ remarking exceeded traffic to BE).
    If you want to protect your video traffic in the future, you will have to design new QoS policy and apply it per link.
    Regarding "trust dscp" toward WLC/AP - if you configure this, all your laptops will be able to inject marked traffic into your network, abusing your QoS policy; that is why the best practice for VoIP phones is to be placed into dedicated voice VLAN + trust cos (not dscp).
    PS: I would suggest you to try the command[s] on one switch and see what configuration will be applied per port (+global).

  • What is the best way to trust DSCP values on 6509 interfaces?

    I have 6509's with 2 Ten-gig interfaces configured into a Port Channel (routed with IP addressing) - the IOS is 12.2(18)SXE3. I want to trust the DSCP values of packets traveling through the interfaces and have applied 'mls qos trust dscp' on both the physical Ten-gig interfaces as well as the L3 Port Channel interface.
    1.Is it necessary to have the statement on all the interfaces, or is just having it on the Port channel enough?
    Here is the config right now:
    interface Port-channel4
    description to 6509-Core-A P4 (T1/3, T2/3)
    ip address 164.xxx.xx.xx 255.255.255.252
    ip pim sparse-mode
    ip route-cache flow
    mls qos trust dscp
    interface TenGigabitEthernet1/1
    description to 6509-Core-A T1/3 (P4)
    no ip address
    ip route-cache flow
    mls qos trust dscp
    channel-group 4 mode desirable
    interface TenGigabitEthernet1/2
    description to 6509-Core-A T2/3 (P4)
    no ip address
    ip route-cache flow
    mls qos trust dscp
    channel-group 4 mode desirable
    Also, what command can I use to see the dscp counters? In the 3560/3750 catalyst line you can enter: 'sh mls qos int f0/1 statistics' and get a display of all the dscp/cos input/output packet counts, but I can't find a comparable command in the 6509.
    2. Is there one?

    I think you do this on the individual port interfaces, not the port-channel interface, becasue the queueing mechanisims associated with DSCP values are port based.
    By doing this, if you have policy maps you want to use, you attach them to the ports not the port-channel.
    For the command on 6509, you can use:
    sh mls qos ip gigabitEthernet 1/1
    Hope this helps and let me know how that works out.
    Gary

  • Cat3560 and Trust DSCP Question

    Hello,
    we have several Cat3560 (IOS12.2.20SE4)as pure Layer-2 Switches in use. At these Switches are IP-Phones via a dot1q trunk connected (cisco and non-cisco Phones). The phones mark their traffic with COS=5 and DSCP=46.
    Is it possible to configure a "mls qos trust dscp" at the switch-interfaces with IP-Phones, when the switchports are configured as Layer-2?
    Of course the switches should also be able to put the traffic in the different receive and transmit-queues based on the received dscp-value.
    We'd like configure QoS over our whole campus area DCSP-based and not CoS based to avoid the effort with the CoS<->DSCP mappings.
    Thanks
    HL

    Hi,
    Check if that helps.
    http://www.cisco.com/univercd/cc/td/doc/product/lan/cat3560/12220se/3560scg/swqos.htm
    HTH, Please rate if it does.
    -amit singh

  • Mls qos trust "cos or dscp" ?

    I have an uplink from an access switch configured as a trunk 802.1q that needs to trust Qos towards the distribution switch, does this have to trust cos or dscp ? the issue is that the access switch has a local voice vlan and the trunk uses another vlan to connect to the distribution.

    You don't trust "to" a device, only from.
    The advice I've gotten from switching guys is "If you're not sure - just trust DSCP".
    If you try to trust cos on an access port where there is no VLAN header, there is no cos, and you can have problems.
    If you have a trunk to another switch, you can trust cos and you shouldn't have any problems.
    hth,
    nick

  • Question about 3750 mls qos map dscp-output-q and cos-output-q

    1. If a egress packet has both Cos and Dscp setting, which map should this packet used to put into queue?
    2. The 3750 is doing ip route. After the packet is routed, will the packet keep the DSCP and COS? Or it will just keep the DSCP and using the dscp-cos map to create a new COS.

    Apologies for the confusion with the terminalogy.
    The question is where you have configured the trust boundaries, do you necessarily trust the DSCP value prior to being routed across your network?
    Therefore, although you have explicity trusted the DSCP value, do you still trust the value at the remote peer.
    For example, you connect into an MPLS with QoS enabled, you know that the values you are trusting are correct within your network, however at the remote peer/branch they could be remarked by the provider. Therefore do you 'believe' the values, or do you simply not trust them and then reclassify on ingress.
    Regards
    Allan.
    Hope this makes sense..

  • MQC QoS - C3650 - DSCP Trust

    Hi,
    We are migrating from 3750's to 3650's and I need to move the QoS over. In my policy map I would normally trust DSCP, but on the 3650's, there doesnt seem to be a trust DSCP command. Below is my policy map config:
    policy-map vvc-map
    class voice
    trust dscp
    class video
    trust dscp
    class control
    trust dscp
    class control-VoIP
    trust dscp
    Does anyone have any ideas on what has replaced the trust DSCP command in the policy map or is there a different way of doing it now?
    Thanks,
    Mark

    Hi Mark
    In IOS XE (3650/3850) no trust dscp option on policy map config.
    Here is a doc on how trust works on those switches.
    http://www.cisco.com/en/US/docs/solutions/Enterprise/Video/qoscampuscat3x50aag.html#wp1052949
    HTH
    Regards
    Carlo

Maybe you are looking for

  • Dflt report in 6i and 10g

    Hi I am trying to get a tillslip to print correctly after converting from reports 6i to 10g. The problem i think is that the outputfile generated in the 6i version is diffrent from the output file in 10g. The 10g version looks similar to postscript w

  • How to preview a whole portrait picture in pan zoom mode?

    Hi I'm new. Currently, I'm trying to create a slide show for my website, and I want to make some motion(zoom in zoom out fade in and fade out) in my pictures. In pan zoom mode, I can preview a whole landscape oriented picture, but portrait oriented p

  • MobileMe gallery is still publishing to my iPhone - how to I stop it, please??

    I was having a tidy-up of my iPhone today and realised I have several albums in 'Photos' which derive from an old MobileMe account I had which published photos to my iPhone.  Aperture is not publishing to MobileMe, so I can't stop it from there.  You

  • Query Migration from bw3.5 into BI7.0

    Hi friends,                    I need to run the queries in BI7.0 which are in BW3.5. How can we do this and what are the prerequisites. Thanks&Regards Shaliny M.

  • Always no response for video/audio chat

    neophyte here; and i cannot gasp ichat yet; i tried once with a Mac friend, but everytime I add her to my buddy list, she goes offline and I couldn't reply to any of her messages as there is no message line for me to type in. Also, everytime I invite