Hi, Paul I'm not sure I understand the issue. IPsec is carrying some IP-based protocol from the UE, through some gateway to a host in the service provider's network. Those IP packets can have QoS indication like any other IP packets, through the TOS field in IPv4 or the Traffic Class field in IPv6. Those fields get encrypted and encapsulated with the entire IP packet and come out the same at the other side, so they go into the provider network with the same properties.
According to RFC 4301, the IPsec packet inherits the ECN and DS fields from the inner packet. See sections 5.1.2.1 and 5.1.2.2. So the DS field set by the UE is propagated throughout the packet's path. Hope this helps Yoav On Nov 4, 2013, at 1:06 AM, Paul Simon <paulsimo...@gmail.com> wrote: > Hi, > > > We are having a requirement to have Qos per CHILD SA inside one IKE SA or to > have Qos per IKE SA. Is it possible to communicate the Qos in IKE handshake ? > Or else how can we achieve to use different Qos, atleast per IKE SA. > > To give a background on the issue we are working on. In usual LTE and 3G > mobile networks before establishing a connection, the UE would sent out the > desired Qos details to the mobile network. The network will then decide on > what Qos can be granted and then communicate this information to UE. > Now people are increasingly using WiFi to connect to mobile network. So we > need a secure connection from WiFi UE to network. For this IPsec is being > recommended in the standards. So here comes the issue how can the mobile > communicate what Qos is preferred to network in IKE handshake. > > so can any one throw some light on the issue ? > > > Thanks and Regards, > Paul Simon _______________________________________________ IPsec mailing list IPsec@ietf.org https://www.ietf.org/mailman/listinfo/ipsec
