Book now with code EOY2025
rakem wrote: » Is there a command to see what markings (IP Precedence or DSCP) IP packets have when the enter a device?? So for example if i set an edge switch to mark all traffic from a certain subnet with AF43, can i enter a command on the device doing the marking, or a downstream device, to confirm that traffic is being marked with the correct value?
kpjungle wrote: » Make a policy-map matching what you expect on a downrange L3 device, and do a sh policy-map int <interface>:
malcybood wrote: » Span / port mirror is your best bet and use wireshark, then you don't have to know what you're traffic is being marked, the packet capture will tell you. just go under the interface your laptop is plugged (in this case fa0/5) into and do the following (to capture packets going in/out of port fa0/1) then start a capture in Wireshark. switch(config)#int fa0/5 switch(config-if)#port monitor fa0/1 When you stop the capture you find the packet in the trace by source/destination address by using a filter. To find a particular source/destination IP, type the following in the filter field of wireshark to for example find all traffic for ip address 10.1.1.1 ip.addr==10.1.1.1 Press return and your trace will filter to all traffic tx/rx from this ip address. When you find the packet in the trace and open up Internet Protocol and look at the DSCP marking.
Use code EOY2025 to receive $250 off your 2025 certification boot camp!
