Support Support Downloads Knowledge Base Juniper Support Portal Community

Knowledge Base

Search our Knowledge Base sites to find answers to your questions.

Ask All Knowledge Base Sites All Knowledge Base Sites JunosE Defect (KA)Knowledge BaseSecurity AdvisoriesTechnical BulletinsTechnotes Sign in to display secure content and recently viewed articles

[ScreenOS] Does ScreenOS support traffic shaping of packets with DSCP bit marked?



Article ID: KB12939 KB Last Updated: 14 Jan 2015Version: 4.0

Another router device is marking the DSCP bit for IP Precedence, and is passing that packet over to the firewall. User needs to determine if the firewall will be able to shape traffic based on the DSCP bit in the packet received.


Will firewall be able to shape traffic based on the DSCP bit in the packet received?


Until ScreenOS 6.2.0, the firewall is not be able to shape traffic based on the DSCP bit marked by another Layer 3 device. 

For example, assume a packet comes into a router, and the router marks the DSCP bit with an IP Precedence.  When the packet reaches the firewall, the firewall will simply forward the packet, without traffic shaping based on the DSCP bit. 

Starting in ScreenOS 6.3.0r12, traffic shaping can be done based on the DSCP markings on the incoming traffic.

The details are mentioned in the Concepts & Examples - ScreenOS Reference Guide - Fundamentals [PDF].

However on ASIC (ISG-1000, ISG-2000, NS5200, NS5400) platforms, policy-based traffic shaping (like GBW/MBW) is not supported. More information on this can be found in KB5896 - [ScreenOS] Traffic shaping support on ASIC platforms.

Related Links

Comment on this article > Affected Products Browse the Knowledge Base for more articles related to these product categories. Select a category to begin.

Getting Up and Running with Junos

Getting Up and Running with Junos Security Alerts and Vulnerabilities Product Alerts and Software Release Notices Problem Report (PR) Search Tool EOL Notices and Bulletins JTAC User Guide Customer Care User Guide Pathfinder SRX High Availability Configurator SRX VPN Configurator Training Courses and Videos End User Licence Agreement Global Search