Changing the DSCP value by using layer7

HI,

I’m trying to change DSCP value for ssh,telnet,www,sip on v5.0rc10 x86 platform.

For example the telnet connection:

ip firewall layer7-protocol add name=telnet regexp=“^\xff[\xfb-\xfe].\xff[\xfb-\xfe].\xff[\xfb-\xfe]”
ip firewall mangle add action=change-dscp chain=forward disabled=no layer7-protocol=“telnet” new-dscp=10

In the result counters are not catching any packets.

br
Piotr Polok

You are trying to mark telnet going to the router it self or over the router?

The telnet is only example. I’m trying to change dscp for packets that are forwarded by router.

It would be significantly more efficient if you used protocols and destination/source ports.

HI,

I need to use L7 in order to catch voip packets and it looks like that the L7 is not working in this version of MT or I’m doing something wrong.

br
Piotr Polok