[j-nsp] EVPN/VXLAN over IPsec over Internet
jackson.tim at gmail.com
Sat Jun 1 09:06:39 EDT 2019
I've done some hacks with an MX to do inline GRE frag+reassembly over the
internet with a looped macsec GigE port to get encrypted traffic with full
MTU. You could add VXLAN to that and get what you want kinda. MX GRE inline
frag/reassembly works well.
On Sat, Jun 1, 2019, 7:44 AM Chen Jiang <ilovebgp4 at gmail.com> wrote:
> Hi! Experts
> Sorry for disturbing, we know that EVPN/VXLAN cannot fragment packets, but
> we want to use IPsec/Internet as backup EVPN/VXLAN path, is there any
> workaround to forwarding such packets in EVPN/VXLAN over IPsec over
> Thanks in advance.
> James Chen
> juniper-nsp mailing list juniper-nsp at puck.nether.net
More information about the juniper-nsp