[j-nsp] ES PIC required for BGP-over-IPSEC?

[David Xu]

Yes. Without a ES PIC, only ESP or AH security protocols are supported.

-----Original Message-----
From: Daniel Roesen [mailto:dr at cluenet.de] 
Sent: April 16, 2004 2:59 PM
To: 'juniper-nsp at puck.nether.net'
Subject: Re: [j-nsp] ES PIC required for BGP-over-IPSEC?


On Fri, Apr 16, 2004 at 02:37:17PM -0400, David Xu wrote:
> Try the following configs (worked in my lab, no ES PIC required):

Thanks, indeed. Either AH _or_ ESP in transport mode works.
But AH+ESP (which can do only tunnel mode) does not.

Is that expected?


Best regards,
Daniel
_______________________________________________
juniper-nsp mailing list juniper-nsp at puck.nether.net
http://puck.nether.net/mailman/listinfo/juniper-nsp