Après lecture du manuel, il me semble qu'avec la nouvelle configuration, le switch va écrasser les valeurs PCP/DSCP de paquets arrivants ("The port is considered untrusted. Both headers are ignored, and the port's profile is forced to all ingress packets. This is the default setting."). Cela ne m'arrange pas car je modifie pour IPv6 le PCP/DSCP des certaines paquets (ICMPv6 types 133, 135, 136) avec des mangle rules.

Voici la conf mise à jour :

Code: [Sélectionner]

/interface ethernet switch
set 0 qos-hw-offloading=yes

/interface ethernet switch qos port
set Router trust-l2=keep trust-l3=keep
set ONT trust-l2=keep trust-l3=keep

/interface ethernet switch qos profile
add comment="Orange BNC reqs - PCP=6, DSCP=48 (CS6)" dscp=48 name=orange-prio-bng pcp=6 \
    traffic-class=6

/interface ethernet switch qos port
set sfp-sfpplus2 tx-manager=offline
set sfp-sfpplus3 tx-manager=offline

/interface ethernet switch l3hw-settings
set icmp-reply-on-error=no

/interface ethernet switch rule
add comment="Modify QoS profile for Orange ISP - ARP traffic" mac-protocol=arp new-qos-profile=\
    orange-prio-bng ports=Router switch=switch1 vlan-id=832
add comment="Modify QoS profile for Orange ISP - DHCPv4" dst-port=67 mac-protocol=ip \
    new-qos-profile=orange-prio-bng ports=Router protocol=udp switch=switch1 vlan-id=832
add comment="Modify QoS profile for Orange ISP - DHCPv6" dst-port=547 mac-protocol=ipv6 \
    new-qos-profile=orange-prio-bng ports=Router protocol=udp switch=switch1 vlan-id=832


Router : Connexion au routeur
ONT : As indicated