Fortinet black logo

Administration Guide

Marking

Copy Link
Copy Doc ID 962fb21b-9bd3-11eb-b70b-00505692583a:609013
Download PDF

Marking

FortiSwitchOS supports two ways to indicate the priority of outgoing packets:

  • CoS marking: The priority is set with the CoS value of the 802.1Q tag. The range of CoS values is 0-7.
  • Differential service code point (DSCP) marking: The priority is set with the DSCP value in the IP header. The range of DSCP values is 0-63.

You can use one of these methods or both methods.

Whether the CoS or DSCP values of inbound packets are remarked is subject to the classification by ACL rules for the ingress interfaces. When CoS or DSCP marking take place, the outbound queuing is not impacted, meaning it is still based on trust maps and the original CoS or DSCP values, as described in Determining the egress queue .

The following example shows how to use the CLI to configure an ACL policy to mark the CoS and DSCP values of inbound packets to 4 and 48 on port1 when their CoS values are 2:

config switch acl ingress

edit 10

config action

set count enable

set remark-cos 4

set remark-dscp 48

end

config classifier

set cos 2

end

set ingress-interface "port1"

set status active

next

end

Marking

FortiSwitchOS supports two ways to indicate the priority of outgoing packets:

  • CoS marking: The priority is set with the CoS value of the 802.1Q tag. The range of CoS values is 0-7.
  • Differential service code point (DSCP) marking: The priority is set with the DSCP value in the IP header. The range of DSCP values is 0-63.

You can use one of these methods or both methods.

Whether the CoS or DSCP values of inbound packets are remarked is subject to the classification by ACL rules for the ingress interfaces. When CoS or DSCP marking take place, the outbound queuing is not impacted, meaning it is still based on trust maps and the original CoS or DSCP values, as described in Determining the egress queue .

The following example shows how to use the CLI to configure an ACL policy to mark the CoS and DSCP values of inbound packets to 4 and 48 on port1 when their CoS values are 2:

config switch acl ingress

edit 10

config action

set count enable

set remark-cos 4

set remark-dscp 48

end

config classifier

set cos 2

end

set ingress-interface "port1"

set status active

next

end