IPSec - Will RouterOS copy QoS-flag (DSCP/TOS)

RouterOS General
1

Hi,

Does anyone know if RouterOS will copy the QoS-value from the packet to be encrypted and set that QoS-value on the IPSec-header?
If not… is this something I can instruct the RouterOS todo - with mangle or something like that?

:slight_smile:

2

A little late here… but in my testing (just now, on 6.25 between two CCRs), ROS does indeed copy the original DSCP value to the new header. You can also mangle it like any other traffic if you need to set/change the value. Lovely!