Forum Discussion

Peter_Aeschlima's avatar
Peter_Aeschlima
Icon for Nimbostratus rankNimbostratus
Jan 22, 2014

ipsec tunnel & route domains

I got a large number of route domains, each containing 1 specific, private class-C subnet in 1 VLan each. The all have the same parent RD "0" which is the only network reachable from a remote locatio...
BIG-IP Access Policy Manager (APM)
design
security
TMSH
Peter_Aeschlima's avatar
Peter_Aeschlima
Icon for Nimbostratus rankNimbostratus
Jan 23, 2014

Just got word from F5 that IPsec is currently only supported for RD=0.

 

Thanks Kevin, but routing "back down" to my RDs from RD=0 would make them accessible from there, something I prevented by using RDs in the 1st place.

 

So I'll need to think of a workaround or maybe drop the Route Domains entirely. I'll update when found a solution.

 

BR, p

 

  • zeiss_63263's avatar
    zeiss_63263
    Historic F5 Account
    Aug 14, 2017

    Route-Domains + IKEv1 IPsec are now fully supported in 12.0.0. If your IPsec need to cross route-domains, meaning that the external and internal VLANs in different route-domain, then IPsec "interface mode" is your best option.