Copy DSCP value to ESP header for BOVPN
I would like to prioritize traffic over a BOVPN using DSCP. Packets can be assigned a DSCP value at the BOVPN-Allow policy level, however when those packets get re-encapsulated in an ESP header and sent out the external interface, no DSCP value is assigned (or rather it is set to 0). Is there a way to copy the DSCP value to the outer ESP header when sending packets over a VPN?
Here's documentation explaining how this works in Fortinet and Meraki equipment.