Re: [j-nsp] RES: Trying to get OSPF to work across IPsec for Redundancy

2011-04-29 Thread OBrien, Will
1 1:15 AM >> To: juniper-nsp@puck.nether.net >> Subject: Re: [j-nsp] RES: Trying to get OSPF to work across IPsec for >> Redundancy >> >> Actually... >> OSPF will work across an ipsec tunnel. Unfortunately, last time I >> checked, it wouldn't work acros

Re: [j-nsp] RES: Trying to get OSPF to work across IPsec for Redundancy

2011-04-29 Thread Stefan Fouant
> -Original Message- > From: juniper-nsp-boun...@puck.nether.net [mailto:juniper-nsp- > boun...@puck.nether.net] On Behalf Of OBrien, Will > Sent: Friday, April 29, 2011 1:15 AM > To: juniper-nsp@puck.nether.net > Subject: Re: [j-nsp] RES: Trying to get OSPF to wor

Re: [j-nsp] RES: Trying to get OSPF to work across IPsec for Redundancy

2011-04-28 Thread OBrien, Will
Actually... OSPF will work across an ipsec tunnel. Unfortunately, last time I checked, it wouldn't work across a tunnel that's terminated within a routing instance on a srx. The issue was confirmed by JTAC. We haven't tried it on 10.4 yet, but it's a known issue with older code. OSPF just won't

Re: [j-nsp] RES: Trying to get OSPF to work across IPsec for Redundancy

2011-04-28 Thread Keegan Holley
sorry I meant IPSEC doesn't carry multicast. OSPF technically doesn't "carry" anything. On Thu, Apr 28, 2011 at 11:28 PM, Keegan Holley wrote: > I don't think OSPF carries multicast. I know cisco routers have a neighbor > statement that will force it to unicast hello's I've never tried it on a

Re: [j-nsp] RES: Trying to get OSPF to work across IPsec for Redundancy

2011-04-28 Thread Doug Hanks
: Trying to get OSPF to work across IPsec for Redundancy I don't think OSPF carries multicast. I know cisco routers have a neighbor statement that will force it to unicast hello's I've never tried it on a juniper. I think if you do GRE over IPSEC (not to be confused with IPSEC over GRE

Re: [j-nsp] RES: Trying to get OSPF to work across IPsec for Redundancy

2011-04-28 Thread Keegan Holley
I don't think OSPF carries multicast. I know cisco routers have a neighbor statement that will force it to unicast hello's I've never tried it on a juniper. I think if you do GRE over IPSEC (not to be confused with IPSEC over GRE) the multicast will work as well. It depends on your endpoints thou

[j-nsp] RES: Trying to get OSPF to work across IPsec for Redundancy

2011-04-28 Thread Leonardo Gama Souza
> Hello All: > > I'm trying to get OSPF up over IPsec. We have two IPsec tunnels, a > primary and a secondary that our spoke router can use. We want to have > the spoke router run OSPF across both and then in case of a failure of > the primary hub router (where the primary IPsec tunnel terminates