Setting Priority through DSCP for QOS on the Palo Alto Networks Firewall

Setting Priority through DSCP for QOS on the Palo Alto Networks Firewall

22106
Created On 09/25/18 17:51 PM - Last Updated 10/20/20 18:06 PM


Resolution

Overview

The priority to packets can be set at layer 3 by changing the DSCP values. This document describes the steps to configure DSCP on the Palo Alto Networks device.

 

Steps

  1. On the webGUI, open/add a security rule.
  2. Navigate to the Other Settings section under the Actions tab:
    Capture.PNG.png
  3. Select IP Dscp or IP Precedence based on the need and select the underlying options.


In the following example, the "ef" (Expedited Forwarding or Express Forward) is selected:
Dscp -1.PNG.png
The "ef" marking is applied if the first 3 bits out of the 6 bits allocated to DSCP in the Layer 3 packet header is 101 (EF). This is generally used for critical or RTP based voice traffic and similar applications.

 

The following is an example packet capture taken on the Palo Alto Networks firewall at the transmit stage:
Dscp-3.PNG.png

 

See Also

To view the other available DSCP Markings, see What DSCP Markings are Available on the Palo Alto Networks Firewall?

 

owner: ssunku



Attachments
Actions
  • Print
  • Copy Link

    https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClKrCAK&refURL=http%3A%2F%2Fknowledgebase.paloaltonetworks.com%2FKCSArticleDetail

Attachments
Choose Language