IP Router Configuration
Router Configuration Guide 189
• IOM3-XP cards for the 7750 SR and 7450 ESS
• Null/Dot1q encaps
• Network ports
•IPv4
The no form of the command removes the strip-label command.
In order to associate an interface that is configured with the strip-label parameter with a port, the port
must be configured as single-fiber for the command to be valid.
Packets that are subject to the strip-label action and are mirrored (using mirrors or lawful interception)
will contain the original MPLS labels (and other L2 encapsulation) in the mirrored copy of the packet,
as they appeared on the wire, when the mirror-dest type is the default type “ether”. If the mirror-dest
type is “ip-only”, then the mirrored copy of the packet will not contain the original L2 encapsulation
or the stripped MPLS labels.
Default no strip-label
tos-marking-state
Syntax tos-marking-state {trusted | untrusted}
no tos-marking-state
Context config>router>interface
Description This command is used on a network IP interface to alter the default trusted state to a non-trusted state.
When unset or reverted to the trusted default, the ToS field will not be remarked by egress network IP
interfaces unless the egress network IP interface has the remark-trusted state set, in which case the
egress network interface treats all IES and network IP interface as untrusted.
When the ingress network IP interface is set to untrusted, all egress network IP interfaces will remark
IP packets received on the network interface according to the egress marking definitions on each
network interface. The egress network remarking rules also apply to the ToS field of IP packets routed
using IGP shortcuts (tunneled to a remote next-hop). However, the tunnel QoS markings are always
derived from the egress network QoS definitions.
Egress marking and remarking is based on the internal forwarding class and profile state of the packet
once it reaches the egress interface. The forwarding class is derived from ingress classification
functions. The profile of a packet is either derived from ingress classification or ingress policing.
The default marking state for network IP interfaces is trusted. This is equivalent to declaring no tos-
marking-state on the network IP interface. When undefined or set to tos-marking-state trusted, the
trusted state of the interface will not be displayed when using show config or show info unless the
detail parameter is given. The save config command will not store the default tos-marking-state trusted
state for network IP interfaces unless the detail parameter is also specified.
The no form of the command is used to restore the trusted state to a network IP interface. This is
equivalent to executing the tos-marking-state trusted command.
Default trusted
To Next Page
Loading...
