On most juniper platforms you cannot mark on ingress. You have to do the whole convaluded process of setting up forwarding classes and doing remark policies.
You have to apply these remark filters on all exit points of the box to get traffic marked. IMHO this is an awful implementation and I've asked for this to be changes but they don't listen. All other vendors all ingress remarking... On Apr 17, 2011 3:37 AM, "medrees" <[email protected]> wrote: > Hi Expertise > > Can you help me to assign IP-PREC 6 for all HTTP traffic received > from ae0.2 aggregate sub-interface where I tried that using firewall filter > and it failed and gave me message "then dscp" not supported on ae0". > > These is the applied configuration > > R# show firewall family inet filter SET-PREC-6 > term PREC-6 { > then { > accept; > dscp cs6; > } > } > > {master}[edit] > R# show interfaces ae0.2 > vlan-id 2; > family inet { > filter { > input SET-PREC-6; > } > > R# commit check > re0: > [edit interfaces ae0 unit 2 family inet] > 'filter' > Referenced filter 'SET-PREC-6' can not be used as "then dscp" not > supported on ae0. > error: configuration check-out failed > > _______________________________________________ > juniper-nsp mailing list [email protected] > https://puck.nether.net/mailman/listinfo/juniper-nsp _______________________________________________ juniper-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/juniper-nsp
