decap-dscp testing - requires netkey

This is not negotiated. West sets this option