Configuring Layer 2 trusted or untrusted ports

Configure a port as trusted or untrusted to determine the Layer 2 QoS actions the switch performs. A trusted port (override disabled) honors incoming 802.1p bit markings. An untrusted port (override enabled) overrides 802.1p bit markings.

Before you begin

Enable DiffServ.

Procedure

Enter Interface Configuration mode:

enable

configure terminal

interface GigabitEthernet {slot/port[/sub-port][-slot/port[/sub-port]][,...][slot/all][all]} or interface vlan <1–4059>

Note

If the platform supports channelization and the port is channelized, you must also specify the sub-port in the format slot/port/sub-port.
Configure the port as Layer 2 untrusted:

qos 802.1p-override [enable]
Configure the port as Layer 2 trusted:

no qos 802.1p-override [enable]

Variable Definitions

Use the data in the following table to use the qos 802.1p-override command.


Variable	Value
enable	If you use this variable, the port overrides incoming 802.1p bits; if you do not use this variable, the port honors and services incoming 802.1p bits. The default is disable (Layer 2 trusted).