What QOS Markings for IP Precedence are Available on the Palo Alto Networks Firewall?
14928
Created On 09/26/18 13:53 PM - Last Modified 06/05/23 08:08 AM
Resolution
The following IP Precedence values exist on the Palo Alto Networks firewall:
cs0 codepoint 000
cs1 codepoint 001
cs2 codepoint 010
cs3 codepoint 011
cs4 codepoint 100
cs5 codepoint 101
cs6 codepoint 110
cs7 codepoint 111
On the web UI, the values can be configured/viewed in the Security Policy Rule. Open/add a security rule and navigate to the Other Settings section under the Actions tab:
On the CLI, the values can be viewed while configuring a security policy:
> configure
# set vsys vsys1 rulebase security rules test qos marking ip-precedence
Note: Hit the <tab> key after entering "ip-precedence" above to see the values.
owner: mbutt