[c-nsp] IPSec crypto map on MPLS enabled interface?

Peter Rathlev peter at rathlev.dk
Tue Mar 9 07:35:43 EST 2010


On Tue, 2010-03-09 at 10:49 +0000, Phil Mayers wrote:
> > I the tried changing the ISAKMP profile VRF, et voila, it worked. :-)
> >
> > I have reloaded the box to make sure it's not just good luck that it
> > works now. It seems to work fine after a reload, with MPLS on the core
> > facing interfaces.
> 
> Interesting. Are the packets arriving at the box labelled?

Yes, though just with the VPN label because of penultimate hop popping.
And the encrypted traffic leaves the box tagged too.

-- 
Peter




More information about the cisco-nsp mailing list