The ike dscp command sets a global DSCP priority of IKE packets.
The undo ike dscp command cancels the DSCP priority configuration.
By default, the global DSCP priority of IKE packets is 0.
| Parameter | Description | Value |
|---|---|---|
| dscp-value | Specifies the global DSCP priority of IKE packets. | The value can be an integer or a string of characters. That is, the value can be an integer that ranges from 0 to 63, or a string of AF11 to AF13, AF21 to AF23, AF31 to AF33, AF41 to AF43, CS1 to CS7, EF, or default. |
IKE packets are used for IKE SA and IPSec SA negotiation or DPD. When IKE packets are lost during transmission, IPSec SAs may fail to be negotiated. As a result, packets that need to be protected by IPSec are not protected. The DSCP priority of IKE packets can be improved so that IKE packets are processed preferentially. IKE packet transmission reliability is therefore improved.
To configure the DSCP priority for IKE packets of all IKE peers, run this command.