[c-nsp] IPSec crypto map on MPLS enabled interface?
Peter Rathlev
peter at rathlev.dk
Tue Mar 9 07:35:43 EST 2010
On Tue, 2010-03-09 at 10:49 +0000, Phil Mayers wrote:
> > I the tried changing the ISAKMP profile VRF, et voila, it worked. :-)
> >
> > I have reloaded the box to make sure it's not just good luck that it
> > works now. It seems to work fine after a reload, with MPLS on the core
> > facing interfaces.
>
> Interesting. Are the packets arriving at the box labelled?
Yes, though just with the VPN label because of penultimate hop popping.
And the encrypted traffic leaves the box tagged too.
--
Peter
More information about the cisco-nsp
mailing list