DSCP Marking Configuration

General questions
1

Doing a QOS lab and I’m having trouble matching packets.
The DSCP markings are applied to packets when I match traffic based on the protocol from a particular vlan. I can see this via wire capture and via my policy traffic policy statistics. But when I attempt to match based on the source IP Address, source interface, or VIF ID, the DSCP markings are not applied.

set traffic-policy shaper test default set-dscp AF22
set traffic-policy shaper test class 55 match Farm ip #source addr, vif, int
set traffic-policy shaper test class 55 set-dscp AF21
set traffic-policy shaper test default bandwidth 50mbit
set interfaces ethernet eth1 traffic-policy out test #MY WAN Interface

I’m following this

Can someone please let me know what I am misconfiguring?
thanks

Blockquote

2

If you also do sNAT, there’s no longer a source IP you can match on. VIF id will probably only work on outgoing vlan tag. When packet reaches shaper, incoming tag is already gone.

Not sure why matching on incoming interface won’t work