On Wednesday, January 16, 2013, Pavel Lunin wrote: > > > Despite this is pretty obvious and elegant, it's a very common case when > you can't do this for whatever reason. E. g. older IOS could not do VTI > without GRE but SRX cluster could not do GRE until very recent; remote > peer is just too dumb, etc. Sometimes remote side just won't switch to > route-based because they don't know how to or it's a NOC shift with > strict config guidelines that they can break. A very straightforward > workarond for such cases is to add another tunnel to the same peer for > the second pair of subnets. But it requires another global address on > one side.
or vpn remote side is ASA which not support GRE and VTI Rob _______________________________________________ juniper-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/juniper-nsp
