I've done this with ipsec/gre tunnels, and verified the TOS values are kept intact on the GRE packet. You can always use an ACL on the remote location to match on your DSCP value when it comes in from the service provider cloud, the catch is at that point the traffic will be GRE, so you would do something like:<br>
<br>ip access-list extended TEST<br>permit grep any any dscp ef<br>permit ip any any <---- Don't forget about the ip any any<br><br>interface serx/y<br>ip access-group TEST in<br><br>if you are sending traffic out the cloud with DSCP value 46, they should arrive at the remote location with the DSCP value of 46 and that type acl entry should increment. If not they're stripping it, or your not sending it. <br>
<br>Don't forget about TCP MSS and IP MTU. <br><br>HTH,<br><br>NIck Griffin<br><br><br><div class="gmail_quote">On Fri, Jun 5, 2009 at 11:57 AM, Eric Pedersen <span dir="ltr"><<a href="mailto:eric.pedersen@sait.ca">eric.pedersen@sait.ca</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
<div bgcolor="white" link="blue" vlink="purple" lang="EN-US">
<div>
<p><span style="color: rgb(31, 73, 125);">Thanks for the links Wes; I was
unable to find information on what the default behaviour is. I like it when
configuration tasks are “None”.</span></p>
<p><span style="color: rgb(31, 73, 125);"> </span></p>
<p><span style="color: rgb(31, 73, 125);">I have not tested it yet –
I will be doing that next week.</span></p>
<p><a name="121b19770abf1cc8__MailEndCompose"><span style="color: rgb(31, 73, 125);"> </span></a></p>
<div>
<div style="border-style: solid none none; border-color: rgb(181, 196, 223) -moz-use-text-color -moz-use-text-color; border-width: 1pt medium medium; padding: 3pt 0in 0in;">
<p><b><span style="font-size: 10pt; color: windowtext;">From:</span></b><span style="font-size: 10pt; color: windowtext;"> Wes Sisk [mailto:<a href="mailto:wsisk@cisco.com" target="_blank">wsisk@cisco.com</a>] <br>
<b>Sent:</b> June 4, 2009 21:09<br>
<b>To:</b> Eric Pedersen<br>
<b>Cc:</b> <a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a><br>
<b>Subject:</b> Re: [cisco-voip] GRE tunnel with QoS</span></p>
</div>
</div><div><div></div><div class="h5">
<p> </p>
<p>I've not tested it but:<br>
<br>
<br>
<a href="http://www.cisco.com/en/US/docs/ios/11_3/feature/guide/greqos.html" target="_blank">http://www.cisco.com/en/US/docs/ios/11_3/feature/guide/greqos.html</a><br>
Configuration Tasks<br>
None; this feature occurs by default. <br>
<br>
<a href="http://www.cisco.com/en/US/tech/tk543/tk545/technologies_tech_note09186a008017405e.shtml" target="_blank">http://www.cisco.com/en/US/tech/tk543/tk545/technologies_tech_note09186a008017405e.shtml</a><br>
<br>
Do you have indication that it is not working?<br>
<br>
/Wes<br>
<br>
On Thursday, June 04, 2009 8:54:37 PM, Eric Pedersen <a href="mailto:eric.pedersen@sait.ca" target="_blank"><eric.pedersen@sait.ca></a> wrote:<br>
<br>
</p>
<p>I want to set up a GRE tunnel to a remote site over our
provider’s MPLS VPN service. They classify our voice traffic based on
dscp. Does someone have an example of how to set this up so that when packets
are tunneled, their DSCP values are copied to the GRE packet headers?</p>
<p> </p>
<p>Thanks,</p>
<p>Eric</p>
<pre> </pre><pre style="text-align: center;"><hr align="center" size="4" width="90%">
</pre><pre> </pre><pre>_______________________________________________</pre><pre>cisco-voip mailing list</pre><pre><a href="mailto:cisco-voip@puck.nether.net" target="_blank">cisco-voip@puck.nether.net</a></pre><pre><a href="https://puck.nether.net/mailman/listinfo/cisco-voip" target="_blank">https://puck.nether.net/mailman/listinfo/cisco-voip</a></pre>
<pre> </pre>
<p><span style="font-size: 12pt; font-family: "Times New Roman","serif";"> </span></p>
</div></div></div>
</div>
<br>_______________________________________________<br>
cisco-voip mailing list<br>
<a href="mailto:cisco-voip@puck.nether.net">cisco-voip@puck.nether.net</a><br>
<a href="https://puck.nether.net/mailman/listinfo/cisco-voip" target="_blank">https://puck.nether.net/mailman/listinfo/cisco-voip</a><br>
<br></blockquote></div><br>