ipsec/DSCP

[yanhui-wang]

what is the command to copy DSCP from orignal IP header to the new IPsec header.

[spremkumar · Accepted solution]

hi

you need qos pre-classify command under your crypto map configs.

do refer this link for more info and clarity..

http://www.cisco.com/en/US/products/sw/iosswrel/ps1835/products_command_reference_chapter09186a0080087f3c.html#wp1072696

regds

[attrgautam]

On the other hand, i doubt if you need to do pre-classification at all. Because, in the IOS Code, the DSCP/IP Prec fields are automatically copied from the original header to the encapsulating header. Pre-classify is needed only when using the IP address in the original header. Correct me if i am wrong