Testing DSCP Steering with IPsec traffic

IPsec configuration on SHD

ping	root@vSRX3> ping 10.10.227.20 tos 184
	EF = (46 ) 184 in decimal full byte. AF41= (34) 136 in decimal full byte. QoS and DSCP value TOS and IP precedence


single service ( no child service )
With child service
	DSCP= 0 / BE go to mgmt vector ( default / parent servie-policy ) DSCP = 34/AF41 go to mgmt vector ( default / parent servie-policy ) DSCP= 46 / go to MPLS vector ( child service-policy )

Juniper Security