In EXOS matching the traffic on ingress will cause it to use the matching queue on egress.So on ingress you can match the traffic through an ACL for example and put it in one of the qosprofiles.However, if the traffic is already is having a diffserv ...
Without more information my guess is that changing the routes in the hardware tables goes wrong or takes a long time. During that time traffic is send to the CPU for forwarding instead of through hardware and is causing the CPU to become too busy.Ano...
yes., but as you can assign vlans through the policy itself (pvid) you don't need VSA 211. Checkout table 114 in the userguide for vsa's supported with OnePolicy enabled. Table 114: Supported Access-Accept Attributes for ONEPolicy