Re: [j-nsp] EVPN/VXLAN over IPsec over Internet

2019-06-01 Thread Tim Jackson
I've done some hacks with an MX to do inline GRE frag+reassembly over the internet with a looped macsec GigE port to get encrypted traffic with full MTU. You could add VXLAN to that and get what you want kinda. MX GRE inline frag/reassembly works well. On Sat, Jun 1, 2019, 7:44 AM Chen Jiang wr

[j-nsp] EVPN/VXLAN over IPsec over Internet

2019-06-01 Thread Chen Jiang
Hi! Experts Sorry for disturbing, we know that EVPN/VXLAN cannot fragment packets, but we want to use IPsec/Internet as backup EVPN/VXLAN path, is there any workaround to forwarding such packets in EVPN/VXLAN over IPsec over Internet? Thanks in advance. -- BR! James Chen _