I need to set the dscp values on incoming packets from the hosts based on the ip address and pass it onto the upstream router (Cisco router) where the port is trusted. Iam using firewall filter with source address matching and setting the dscp values accordingly. but when i capture packets at the ingress of upstream router all the packets are still with dscp of 0. Can any one let me know what am i missing here.
Here is the configuration i have
family inet {
filter dscp-filter {
term traffic {
from {
source-address {
10.10.89.192/28;
}
}
then dscp af12;
}
}
}
interfaces {
irb {
unit 312 {
family inet {
filter {
input dscp-filter;
}
address 10.10.89.195/27
}
}
}
ge-0/0/0 {
unit 0 {
vlan-id 388
family inet {
address 10.10.59.78/30
}
}
}