Enhanced QoS using DSCP per SA in IPsec VPN with iked process

We provide traffic classification support with Differentiated Services Code Point (DSCP) per security association (SA) in IPsec VPNs using the iked process. This feature is available when you run the IPsec VPN service without the PowerMode IPsec (PMI) mode configuration. It allows your VPN gateways to negotiate separate child SA for each CoS type.