[Openswan Users] freeswan-1.99

Jason Sigurdur Jason.Sigurdur at aspenview.org
Tue Feb 7 12:07:34 CET 2006


Hi, for the past 3 years I have been using redhat 8.0 and freeswan-1.99
for our vpn/routing info structure. 
Recently, we have been doing some voip over our vpn's in which all
traffic will be marked before encryption as 'EF' TOS(0xb8).
Anyway our ISP remarks all packets entering their network as AF11. I
noticed that after the traffic reaches its destination that the outside
ESP traffic is af11 but after decryption the TOS/DS field retains its
original value.

Is it not by default that ipsec transposes the TOS/DS value to the upper
encapsulating packet ?

jason 


More information about the Users mailing list