[j-nsp] EVPN/VXLAN over IPsec over Internet

Tim Jackson jackson.tim at gmail.com
Sat Jun 1 09:06:39 EDT 2019

I've done some hacks with an MX to do inline GRE frag+reassembly over the
internet with a looped macsec GigE port to get encrypted traffic with full
MTU. You could add VXLAN to that and get what you want kinda. MX GRE inline
frag/reassembly works well.

On Sat, Jun 1, 2019, 7:44 AM Chen Jiang <ilovebgp4 at gmail.com> wrote:

> Hi! Experts
> Sorry for disturbing, we know that EVPN/VXLAN cannot fragment packets, but
> we want to use IPsec/Internet as backup EVPN/VXLAN path, is there any
> workaround to forwarding such packets in EVPN/VXLAN over IPsec over
> Internet?
> Thanks in advance.
> --
> BR!
>            James Chen
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/juniper-nsp

More information about the juniper-nsp mailing list