Skip to main content
herschel
herschel
New Member
November 2, 2021
Question

FGT DSCP matching issue

  • November 2, 2021
  • 1 reply
  • 2472 views

The client wants to implement End-to-End QoS for MS Teams in their environment. Can FGT mapping DSCP value to CoS value? L3 SW ---- FGT(NAT mode) --- L2 SW --- Internet If MS Teams has been tagged by the client, how should we set the configuration to match DSCP value and do traffic shaping? How shoul I set tos and tos-mask value? THX! https://docs.microsoft.co...softteams/qos-in-teams ef 101110 af41 100010 af21 010010 As example 2 in https://docs.fortinet.com...dscp-matching-shaping, I set (tos 0x48, tos-mask 0x80),but even no DSCP was tagged, traffic was limited. Can you find root cause of this issue? config firewall shaping-policy edit 1 set name "aa" set service "ALL" set dstintf "port2" set tos 0x48 set tos-mask 0x80 set traffic-shaper "5M" set traffic-shaper-reverse "5M" set srcaddr "all" set dstaddr "all" next end

    1 reply

    Toshi_Esumi
    SuperUser
    Toshi_Esumi
    SuperUser
    November 2, 2021

    If I'm wrong I want to know. But I don't believe FortiGate/FortiOS has a feature to map DSCP(L3) to Cos PRI(L2) or vice versa. My guess of their thinking is that feature should be on the switch side. This guess is coming from the fact FortiSwitch has the feature.

      https://docs.fortinet.com...ty-of-service#Configur

    Terms & ConditionsAccessibility statement