Description: This object is used to set the trust state of an interface. (whether the packets arriving at an interface are trusted to carry the correct data for classification.)

If the object is untrusted(1), then the DSCP assigned to the packet is the DSCP specified by classification rule obtained from the matching ACE (Access Control Entry). ACE is a filter that is used to identify flows with certain characteristics. It includes fields such as ingress/egress ports, L2 addresses, L3 addresses , TCP/UDP port number.

If this object is trustCoS(2), then the DSCP assigned to the packet is the layer2 CoS of the packet mapped to a DSCP by the CoS-to-DSCP mapping defined in object caqCosToDscpDscp.

When this object is trustIpPrec(3), a DSCP is assigned to an IP packet according to the IP-Precedence-to-DSCP mapping defined by the values contained in caqIpPrecToDscpTable. For non-IP packets, trustIpPrec(3) has identical behavior as trustCoS(2).

When this object is trustDscp(4), the DSCP contained in an IP packet is trusted as being the correct value to assign to it. For non-IP packets, trustDscp(4) has identical behavior as trustCoS(2).