Hi

I am not hopeful on this, but thought I would ask.

I have VOIP between sites over IPSEC VPN. Between the VPN endpoints I have another intermediate router that has Queues configured to prioritise and reserve bandwidth for voice based on DSCP 46 markings. Problem is that I can't see any way to mangle the voice packets so they have DSCP 46 *AFTER* encryption.

There are many traffic types in the tunnel, so I can't just change all IPSEC packets to DSCP 46.

Is there a sneaky way to do this?

Mark