TMS zl Management and Configuration Guide ST.1.1.100430

7-289
Virtual Private Networks
Configure a GRE over IPsec VPN with Manual Keying
c. For DF Bit Handling, select one of these options:
– Copy DF bit from clear packet
The TMS zl Module copies the DF bit setting for the IPsec packet
from the inner IP packet.
–Set DF bit
The module sets the DF bit for all IPsec packets.
– Clear DF bit
The module clears the DF bit for all IPsec packets.
See “The Copying of Values from the Original IP Header” on page 7-24
for more information.
d. Under DSCP Options, choose how the TMS zl Module assigns DSCP
values to IPsec packets. Either:
– Select Copy DSCP value from clear packet.
The TMS zl Module assigns each IPsec packet the DSCP value
assigned to the original IP packet.
– Select Set DSCP value and type a value between 0 and 63 in the box.
The TMS zl Module assigns every IPsec packet in this SA the
DSCP that you configure. 0 is the default value and requests
normal handling for the packet.
See “The Copying of Values from the Original IP Header” on page 7-24
for more information.
18. Click Finish.
The IPsec policy is displayed in the VPN > IPsec > IPsec Policies window.
Figure 7-253. VPN > IPsec > IPsec Policies Window (Policy Added)
Move on to the next task: configuring firewall access policies that permit the
VPN traffic.