ODBC traffic from a SQL server to wi-fi clients is tagged AF23 by the LAN. When it arrives at controller I need to re-tag the traffic so that it arrives to the client as DSCP '0'. The user role contains the following firewall policy:
ip access-list session odbc_server
alias odbc_srvs user tcp 1433 permit tos 0 dot1p-priority 0
!
The traffic is still arriving to the client as AF23. I swear I've been able to get this to work for other server-to-client traffic flows, but need a sanity check.