For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

Forum Discussion

2 Replies

  • hoolio's avatar
    hoolio
    Icon for Cirrostratus rankCirrostratus
    Feb 01, 2010
    Hi Ozgur,

     

     

    I don't believe there is a way to set this flag on a packet. You could contact F5 Support to confirm this and/or request an enhancement.

     

     

    Aaron
  • Fred_Wittenberg's avatar
    Fred_Wittenberg
    Historic F5 Account
    Nov 17, 2016

    Realize this is quite dated but I just had to do this for a customer. To set the value to say CS2 you would perform the following:

     

    iptables -t mangle -A OUTPUT -j DSCP --set-dscp-class CS2

     

    NOTE: This change will not persist through reboots. you will need to run iptables-save or use a iptables config such as this

     

    *mangle :PREROUTING ACCEPT [0:0] :OUTPUT ACCEPT [0:0]

     

    Add CS2 Marker

    -A OUTPUT -j DSCP --set-dscp-class CS2 COMMIT *nat :PREROUTING ACCEPT [0:0] :POSTROUTING ACCEPT [0:0] :OUTPUT ACCEPT [0:0] COMMIT