set dscp

Function

The set dscp command configures a DSCP value for IPv4 packets..

The undo set dscp command restores the default DSCP value of IPv4 packets.

By default, the DSCP value of IPv4 packets is 0.

Format

set dscp { dscp-value | af11 | af12 | af13 | af21 | af22 | af23 | af31 | af32 | af33 | af41 | af42 | af43 | cs1 | cs2 | cs3 | cs4 | cs5 | cs6 | cs7 | default | ef } { inbound | outbound }

undo set dscp inbound

undo set dscp outbound

Parameters

Parameter	Description	Value
dscp-value	Indicates the DSCP value of IPv4 packets.	The value is an integer ranges from 0 to 63.
af11	Indicates the DSCP value of IPv4 packets is af11.	-
af12	Indicates the DSCP value of IPv4 packets is af12.	-
af13	Indicates the DSCP value of IPv4 packets is af13.	-
af21	Indicates the DSCP value of IPv4 packets is af21.	-
af22	Indicates the DSCP value of IPv4 packets is af22.	-
af23	Indicates the DSCP value of IPv4 packets is af23.	-
af31	Indicates the DSCP value of IPv4 packets is af31.	-
af32	Indicates the DSCP value of IPv4 packets is af32.	-
af33	Indicates the DSCP value of IPv4 packets is af33.	-
af41	Indicates the DSCP value of IPv4 packets is af41.	-
af42	Indicates the DSCP value of IPv4 packets is af42.	-
af43	Indicates the DSCP value of IPv4 packets is af43.	-
cs1	Indicates the DSCP value of IPv4 packets is cs1.	-
cs2	Indicates the DSCP value of IPv4 packets is cs2.	-
cs3	Indicates the DSCP value of IPv4 packets is cs3.	-
cs4	Indicates the DSCP value of IPv4 packets is cs4.	-
cs5	Indicates the DSCP value of IPv4 packets is cs5.	-
cs6	Indicates the DSCP value of IPv4 packets is cs6.	-
cs7	Indicates the DSCP value of IPv4 packets is cs7.	-
default	Indicates the DSCP value of IPv4 packets is default.	-
ef	Indicates the DSCP value of IPv4 packets is ef.	-
inbound	Indicates the packets to be decrypted.	-
outbound	Indicates the packets to be encrypted.	-

Views

IPsec profile view, ISAKMP IPsec policy view

Default Level

2: Configuration level

Task Name and Operations

Task Name	Operations
ike	write

Usage Guidelines

Usage Scenario

After an IPSec packet is encrypted, a new IP header is generated. The set dscp command is used to configure a DSCP value for the new IP header.

Precautions

If the set dscp command is used several times in the same IPSec policy view, only the last configuration takes effect.

Example

# Set the DSCP value of IPv4 packets sent from a private network to the public network to 20.

<HUAWEI> system-view
[~HUAWEI] ipsec policy policy1 1 isakmp
[*HUAWEI-ipsec-policy-isakmp-policy1-1] set dscp 20 inbound