Do not worked (backup channel) a "ospf" for ipsec.

[Robocop01]

Dear All,

Do not worked (backup channel) a "ospf" for ipsec.
No ping from the ip 192.168.10.2 at the ip 192.168.20.3

my file file_for_cisco_packet_tracer

What is it problem?

[Predrag Jovic · Accepted solution]

For start IPsec does not support multicast, which is configured in configuration. OSPF traffic should be placed in GRE tunnel first and then IPsec could encrypt GRE traffic (if neighbors are to be discovered dynamically, as it is configured).

[Robocop01]

How will add ospf traffic in gre tunnel? Or Do you can offer other solution?

[Predrag Jovic · Accepted solution]

You can find configuration example and explanation - Point-to-Point GRE over IPsec Design and Implementation.

There are other potential solutions (I did not test this one, but it should work) for example, OSPF neighbors can be configured with neighbor command in which case OSPF routers will forward unicast traffic instead of multicast even for hello packets, but I am not sure if that is configurable in packet tracer (maybe it is if serial interfaces are in use on WAN interfaces). There are other potential solutions, for example, IPsec VTI also supports multicast traffic.

[Robocop01]

My case

Configuring a Negotiated L2TPv3 Session for an Xconnect VLAN Subinterface: Example

https://www.cisco.com/c/en/us/td/docs/ios/12_0s/feature/guide/l2tpv30s.html