On 8/25/10 10:59 PM, "Mikael Abrahamsson" <[email protected]> wrote:
> On Wed, 25 Aug 2010, Security Team wrote: > >> Any gurus still awake? > > Have you enabled "mls qos" globally? Are you doing "mls qos trust dscp" on > the interface? I have mls qos there globally, yes. Sorry I omitted that important fact. > "mls qos" should be on to do what you want, mls qos trust dscp needs to be > not there, otherwise the 6500 won't change anything (trust dscp means just > pass it as it is). Right, the interface itself has no trusts on it. Er, No! It does, I just looked! I thought I had removed that! That was it, thanks Mikael. CJ _______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
