Forum Discussion
Peter_Aeschlima
Nimbostratus
Nimbostratusipsec tunnel & route domains
I got a large number of route domains, each containing 1 specific, private class-C subnet in 1 VLan each.
The all have the same parent RD "0" which is the only network reachable from a remote locatio...
Peter_AeschlimaNimbostratus
NimbostratusJust got word from F5 that IPsec is currently only supported for RD=0.
Thanks Kevin, but routing "back down" to my RDs from RD=0 would make them accessible from there, something I prevented by using RDs in the 1st place.
So I'll need to think of a workaround or maybe drop the Route Domains entirely. I'll update when found a solution.
BR, p
Route-Domains + IKEv1 IPsec are now fully supported in 12.0.0. If your IPsec need to cross route-domains, meaning that the external and internal VLANs in different route-domain, then IPsec "interface mode" is your best option.
