For Prioritizing SSH, Telnet, TACACS locally generated traffic on Cisco ASR running IOS XR, we have:

ssh server dscp 48
tacacs-server ipv4 dscp 48

Need the same for cisco GSR: 12416/PRP running IOS. Maybe we can use ip ssh precedence? If yes, how exactly?

  • There really is no reason to prioritize telnet. SSH and TACACS+ should probably set to the control class with a low-drop probability (something like af31).
    – Ron Maupin
    Sep 17 '19 at 12:12
  • I know the rannge for dscp is <0 to 63> and for af31, having 26 should do. But unable to get to do it using "tacacs-server ipv4 dscp" command on GSR 12000 series
    – Blake
    Sep 17 '19 at 12:28
  • I'm not completely sure about that router, but you normally would use ACLs and class maps to classify traffic and a policy map to assign the DSCP values, and you can actually use the AF values, e.g. set dscp af31.
    – Ron Maupin
    Sep 17 '19 at 12:35
  • on IOS you can use ip ssh dscp 48 for SSH connections. Dont know of any command that does the same for tacacs though...
    – Mario Jost
    Sep 17 '19 at 14:28

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.