Also note that in the 'show cos settings' output, the two numeric values in the ToS column would be used for the purpose of doing "TOS Rewrite" upon egress, rather than being used for recognizing TOS values upon ingress as you are seeking here. Hub KB 5810 (
http://bit.ly/1lDhQjj) provides a detailed N-Series TOS Rewrite discussion that in principle - with some minor hardware-based differences - applies to the policy-licensed D2 as well.
By default the D2 (and N-Series) would carry any TOS byte values through, from ingress to egress. In general it is not necessary to reinforce this via TOS Rewrite.