03-18-2003 05:02 AM - edited 02-21-2020 12:25 PM
Dear All,
Just downloaded the Internet draft of "IP Multicast issues with IPSec" authored by two Cisco engineers. Seems like there is a progress to encapsulate multicast packet within IPSec. Since the draft is written by Cisco engineers, do the VPN3K`s developers consider to implement this feature on the next firmware release ? FYI , Netscreen devices are able to encapsulate OSPF packets within the IPSec tunnel. I am wondering when the Cisco VPN3K will have this capability too.
Regards,
Engel
Solved! Go to Solution.
03-18-2003 05:57 PM
Hi,
Its planned for vpn3000 concentrator but no committed dates as of yet, a router can be used to encapsulate multicast traffic inside GRE, and vpn3k can encrypt GRE traffic just fine.
Thanks,
Afaq
03-18-2003 05:57 PM
Hi,
Its planned for vpn3000 concentrator but no committed dates as of yet, a router can be used to encapsulate multicast traffic inside GRE, and vpn3k can encrypt GRE traffic just fine.
Thanks,
Afaq
03-18-2003 06:40 PM
Hi,
Thanks for the information! I am aware about the solution to use GRE to encapsulate the OSPF and then encrypted it with IPSec. This has been discussed a lot on this forum and we have implemented it to some of our customers.
But the disadvantage of this solution is one has to put two routers behind the VPN3K to termincate the GRE tunnel, because VPN3K doesn`t have the capability to speak GRE. With NetScreen solution, it is very easy to do dynamic routing (with multicast speaking routing protocol such EIGRP, OSPF). And this is my main concern, because we are having difficulties to provide VPN3K solution to the customer, when the competitor comes with NetScreen solution to do encrypted dynamic routing through the Internet.
Regards,
Engel
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide