topic Re: Trusting QOS markings in General Topics

Trusting QOS markings

kkeeton — Tue, 29 Jul 2014 16:25:12 GMT

will the PAN-OS automatically trust markings applied by other systems on the network or do I need to make a policy in addition to the policy on the rest of the network?

Re: Trusting QOS markings

hshah — Tue, 29 Jul 2014 16:30:44 GMT

Hi Kkeeton,

As per my knowledge, If PANW receives Packet with QOS marking then by default it allows marking and do not strip them.

Regards,

Hardik Shah

Re: Trusting QOS markings

kkeeton — Tue, 29 Jul 2014 16:37:21 GMT

thanks for response.. and to honor the markings from other devices?

Re: Trusting QOS markings

hshah — Tue, 29 Jul 2014 16:43:21 GMT

Hi Kkeeton,

Yes, it process marking from other devices. Lets say if packet comes with QOS marking 2, than it applies respective QOS.

Let me know if that answers query.

Regards,

Hardik Shah

Re: Trusting QOS markings

kkeeton — Tue, 29 Jul 2014 16:58:09 GMT

will it honor it so if a packet with QOS low marking and one comes in with QOS applied with higher marking, will it process the higher marking first?

Re: Trusting QOS markings

hshah — Tue, 29 Jul 2014 17:05:32 GMT

Hi Kkeeton,

By default QOS is turn off, so it gives same priority to all packets regardless of marking.

If QOS is enabled than it can consider marking.

Regards,

Hardik Shah

Re: Trusting QOS markings

kkeeton — Tue, 29 Jul 2014 17:20:54 GMT

and to "turn it on" so that it trusts and applies/honors the other systems do I need to make a policy or just apply max-bandwidth to the interface. as there is no "turn on check box" do I just make a default blank policy and apply the profile to the interface otherwise unconfigured?

Re: Trusting QOS markings

hshah — Tue, 29 Jul 2014 17:35:51 GMT

Hi Kkeeton,

To process anything in QOS, its required to configure entire QOS policy. Refer following document.

https://live.paloaltonetworks.com/docs/DOC-3439

Its not just one command ot turn on QOS, but its full configuration just like other platforms.

Regards,

Hardik Shah

Re: Trusting QOS markings

kkeeton — Tue, 29 Jul 2014 19:48:35 GMT

so the answer is - by default it will not modify QOS markings but it will not honor them.. to honor them I will need to create a fully policy map in replication of my production network?

Re: Trusting QOS markings

hshah — Tue, 29 Jul 2014 19:49:34 GMT

That is correct Kkeeton ...

Re: Trusting QOS markings

pulukas — Wed, 30 Jul 2014 00:34:53 GMT

You will find the details on QOS configuration and behavior here.

QoS in PAN-OS 4.1