SSRfc or DSCP Steering config for IPSec ESP or NAT traversal
SSRfC Demo
In his solution is use the “red” SSR for DSCP Marking and the “black” SSR for DSCP Steering of ESP traffic
+
The complete separation of control between red and black networks (different conductors managed by different teams) and
the use of the relay router to get around limitations of scenarios where both sides are behind a NAT.