Cisco Catalyst 2000 Configuration Handbook page 281

260 Cisco LAN Switching Configuration Handbook
c. (Optional) Don't trust QoS from sources outside the QoS domain:
Frames that are untagged receive CoS value 0. This also causes the ingress DSCP val-
ues to be mapped to 0 by the CoS-to-DSCP mapping. (See the next step.)
(Optional; Layer 3 only) Adjust the ingress QoS-to-DSCP mappings:
2.
(global) mls qos map cos-dscp 0 8 16 26 32 46 48 56
(global) mls qos map ip-prec-dscp 0 8 16 26 32 46 48 56
You can make minor adjustments to the mappings so that CoS 3 maps to DSCP 26
(AF31) and CoS 5 maps to DSCP 46 (EF). The default values are slightly different
and are not the standard values expected for voice traffic.
(Optional; Layer 3 only) Apply a QoS policy to the voice traffic.
3.
a. Define matching traffic with an ACL:
b. (Layer 3 IOS only) Define the QoS policy:
The QoS information from other switches in a QoS domain can be trusted. This
assumes that every switch in the QoS domain has been configured to enforce
QoS policies consistently.
QoS is port-based on these connections because every VLAN carried over the
link will have its QoS values already examined and modified. A Layer 3 switch
can trust the inbound DSCP information, but a Layer 2 switch can trust only the
inbound CoS values.
IOS L3
(interface) mls qos cos 0
(interface) no mls qos trust
IOS L2
(interface) mls qos cos 0
(interface) no mls qos trust
(global) ip access-list extended acl-name
(access-list) permit tcp any any range 2000 2002 dscp 26
(access-list) exit
In this case, the SCCP voice control TCP ports 2000, 2001, and 2002 are
matched. These frames are given a DSCP value of 26 (AF31), even if this value
was already set.
If other voice protocols are used, you can change the ACL to match against the
appropriate port numbers.
(global) policy-map policy-name
(pmap) class class-name access-group acl-name