IPSec deployment that preserves the IP ToS information.

[mpugliese]

I wonder if there's a IPSec deployment where the IPSec header would preserve

the information contained at the byte ToS of the IP packet header, so it would be feasible confront this value against a match statement at a service-police.

[m.sir]

I think only IPsec in transport mode doesnt encrypt original IP header

If you need QoS through IPsec

Have a look at "Configuring QoS for Virtual Private Networks"

http://www.cisco.com/en/US/products/sw/iosswrel/ps1835/products_configuration_guide_chapter09186a00800c75d3.html

M.

Hope that helps, rate if it does