42-91
Cisco7600 Series Router Cisco IOS Software Configuration Guide, Release 12.2SX
OL-4266-08
Chapter42 Configuring PFC QoS
Configuring PFCQo S
The mls qos trust cos command enables CoS-based receive-queue drop thresholds. To avoid
dropping traffic because of inconsistent CoS values, configure ports with the mls qos trust cos
command only when the received traffic is ISL or 802.1Q frames carrying CoS values that you know
to be consistent with network policy.
With Release 12.2(17b)SXA and later releases, you can configure IEEE8021.Q tunnel ports
configured with the mls qos trust cos command to use a mutated CoS value instead of the received
CoS value (“Configuring Ingress CoS Mutation on IEEE 802.1Q Tunnel Ports” section on
page 42-83).
Use the no mls qos trust command to set the port state to untrusted.
This example shows how to configure Gigabit Ethernet port 1/1 with the trust cos keywords:
Router# configure terminal
Enter configuration commands, one per line. End with CNTL/Z.
Router(config)# interface gigabitethernet 1/1
Router(config-if)# mls qos trust cos
Router(config-if)# end
Router#
This example shows how to verify the configuration:
Router# show queueing interface gigabitethernet 1/1 | include trust
Trust state: trust COS
Router#
Configuring the Ingress LAN Port CoS Value
Note Whether or not PFC QoS uses the CoS value applied with the mls qos cos command depends on the trust
state of the port and the trust state of the traffic received through the port. The mls qos cos command
does not configure the trust state of the port or the trust state of the traffic received through the port.
To use the CoS value applied with the mls qos cos command as the basis of internal DSCP:
On a port that receives only untagged ingress traffic, configure the ingress port as trusted or
configure a trust CoS policy map that matches the ingress traffic.
On a port that receives tagged ingress traffic, configure a trust CoS policy map that matches the
ingress traffic.
You can configure the CoS value that PFCQoS assigns to untagged frames from ingress LAN ports
configured as trusted and to all frames from ingress LAN ports configured as untrusted.