GET VPN and MPLS LDP

[jcarvalh]

Hello,

I am trying to configure a topology in which the GMs of Get VPN topology also have LDP configured (the PE is also the CE); WAN interface has a crypto map configured and MPLS IP configured with traffic beeing label switched.

All works fine if I do not configure mpls ip at interface level; if I do, traffic is not encrypted.

From my point of view, traffic should be encrypted (with IP header preservation) and then the packet would be label switched; however this is not happening (traffic is label switched but not encrypted)

Is this a limitation? Anyone knows if this was supposed to work with mpls enabled on the same interface where crypto map is applied?

Regards,

João.

P.S. - I am trying to set a BGP core free topology with GET VPN.

[jcarvalh]

Hello.

IPsec only encrypts IP packet not labeled packets. I was hoping that the routers would put the label only after encryption of IP packet but encryption comes after labeling.