DSCP trust by VLAN
06-23-2020 04:43 AM
Hi, second QoS question: I trust the DSCP marking on traffic from my voice VLANs but not from general clients who can (and do) set traffic DSCP markings incorrectly, in an attempt to get better service. Presently on Extreme I can trust the dscp markings on some VLANs and remark traffic in other VLANs. On CX-OS it seems I can only trust physical interfaces, which clearly doesn't work in my situation for tagged trunks where I get trusted and untrusted packets from an uplink all on the same interface or lag.
Is there any way to trust dscp based on its VLAN?