DMVPN Control traffic DSCP tagging

[Pavinder Singh]

Hi,

I need to understand the default QOS Tagging of DMVPN control traffic (i.e. BE, AF or EF). We have unstable DMVPN tunnel on a spoke router which doesn't last 12hrs hence service provider is checking further in their network or any sort of drops and need to know how the control traffic of this tunnel is tagged?

There is no class-map or ACL which includes bgp ospf but nothing for DMVPN.

Extended IP access list ACL_control-net
10 permit tcp any any eq bgp
20 permit tcp any eq bgp any
30 permit ospf any any
40 permit eigrp any any
50 permit udp any any eq ntp
60 permit pim any any
70 permit 46 any any

Thanks in advance...

[Joseph W. Doherty]

Cisco devices tag some control traffic with IPPrec 6.  Don't know if that applies to DMVPN control traffic.

Further, Cisco devices give some control traffic special "PAK" priority, some not.  (Also IPPrec tags device sourced packets may not always correspond with PAK priority.)  For those w/o "PAK" priority, you need to determine it's treatment relative to other traffic (often even if marked with non-BE DSCP).