dscp (policy-based routing, packet sniffing, VPN)

Last Updated : Nov 06, 2012 |

Specifies the DSCP value that is set by the current policy operation.

Use not dscp to specify that the current operation set any DSCP value other than requested value. The not dscp command is not relevant in the crypto-list ip-rule context.

Use no dscp to specify that the current operation set the DSCP value to any.

Note:

In crypto-lists, this command is only applicable for rules whose action is no protect.

Syntax

dscp {dscp_value| any}

not dscp dscp_value

no dscp

Parameters

Parameter

Description

Possible Values

Default Value

dscp_value

The DSCP value

0-63

any

Keyword indicating that any DSCP value will match the rule. Using this keyword is equivalent to specifying no dscp.

User Level

read-write

Context

ip capture-list ip-rule, ip pbr-list ip-rule, ip access-control-list ip-rule, ip qos-list ip-rule, ip crypto-list ip-rule

Note:

In ip-rule context, this command tests packets to see if they match the specified DSCP value, but does not change the DSCP value.

Examples

To specify that ip-rule 10 in crypto-list 901 match a DSCP value of 43:

Gxxx-001 (Crypto 901/ip rule 10)# dscp 43

To specify that ip-rule 10 in crypto-list 901 match any DSCP value:

Gxxx-001 (Crypto 901/ip rule 10)# no dscp