[strongSwan] Problem About Dscp Support in scenario of "end to end" tunnel

Tobias Brunner tobias at strongswan.org
Thu Jul 28 11:02:25 CEST 2011

Hi David,

> iptables -t mangle -A OUTPUT -p icmp -j DSCP --set-dscp 10
> iptables -t mangle -A OUTPUT -p icmp -m dscp --dscp 10 -j MARK --set-mark 10

If you add these rules on both sides.  Then you also have to specify 
mark=10 in both configs.  You seem to have done so on the gateway but 
not on the client.


More information about the Users mailing list