As far as I know, Cisco IOS offers the ability (by default) to copy the IP ToS values from the packet header into the tunnel header when using an IPSec tunnel. But does the PIX software version 6.x do the same thing? I'd like to configure QoS on my PIX firewall, but it looks like version 6.3 doesn't support QoS at all. Maybe at least it can copy ToS into the tunnel header???
Yes, the Pix copies the TOS value into the tunnel header during encapsulation. You need to be running version 5.2(1) and higher.
Please refer the Bug ID CSCdr41431 and Release Notes for details.
Let me know if it helps.
** Please rate helpful posts **