dscp (IKE peer view)

Function

The dscp command sets the DSCP priority of IKE packets on a specified IKE peer.

The undo dscp command cancels the DSCP priority configuration.

By default, the DSCP priority of IKE packets on a specified IKE peer is 0.

Format

dscp dscp-value

undo dscp

Parameters

Parameter	Description	Value
dscp-value	Specifies the DSCP priority of IKE packets.	The value can be an integer or a string of characters. That is, the value can be an integer that ranges from 0 to 63, or a string of AF11 to AF13, AF21 to AF23, AF31 to AF33, AF41 to AF43, CS1 to CS7, EF, or default.

Views

IKE peer view

Default Level

2: Configuration level

Usage Guidelines

Usage Scenario

IKE packets are used for IKE SA and IPSec SA negotiation or DPD. When IKE packets are lost during transmission, IPSec SAs may fail to be negotiated. As a result, packets that need to be protected by IPSec are not protected. The DSCP priority of IKE packets can be improved so that IKE packets are processed preferentially. IKE packet transmission reliability is therefore improved.

To configure the DSCP priority for IKE packets of an IKE peer, run this command.

Precautions

The DSCP priority of IKE packets can be configured in the IKE peer view or system view. The system preferentially uses the DSCP priority configured in the IKE peer view. If the DSCP priority is not configured in the IKE peer view, the system uses the global DSCP priority.

Example

# Set the DSCP priority of IKE packets to CS2 for the IKE peer ik1.

<sysname> system-view
[sysname] ike peer ik1
[sysname-ike-peer-ik1] dscp cs2