Re: [j-nsp] Trying to get OSPF to work across IPsec for Redundancy

2011-04-29 Thread OBrien, Will
We were using two tunnels to separate peers. 1 to a pci network and another for office workers to be on our normal user network. I will see if I can dig up details later today Will Sent from my iPad On Apr 29, 2011, at 9:05 AM, Dale Shaw dale.s...@gmail.com wrote: Hi Stefan, On Friday,

Re: [j-nsp] Trying to get OSPF to work across IPsec for Redundancy

2011-04-29 Thread Devin Kennedy
I was finally able to get this working. I had to set the MTU's explicitly on each sub unit (I just set them to 1500). I guess the default MTU that the st0 and sp- interfaces use doesn't work well with OSPF. -Original Message- From: juniper-nsp-boun...@puck.nether.net

Re: [j-nsp] Trying to get OSPF to work across IPsec for Redundancy

2011-04-29 Thread Stefan Fouant
Good catch Devin. Thanks very much for following up on-list so that others may benefit from your experience. Stefan Fouant GPG Key ID: 0xB4C956EC Sent from my HTC EVO. - Reply message - From: Devin Kennedy devinkennedy...@hotmail.com Date: Fri, Apr 29, 2011 6:07 pm Subject: [j-nsp]

[j-nsp] Trying to get OSPF to work across IPsec for Redundancy

2011-04-21 Thread Devin Kennedy
Hello All: I'm trying to get OSPF up over IPsec. We have two IPsec tunnels, a primary and a secondary that our spoke router can use. We want to have the spoke router run OSPF across both and then in case of a failure of the primary hub router (where the primary IPsec tunnel terminates)

Re: [j-nsp] Trying to get OSPF to work across IPsec for Redundancy

2011-04-21 Thread Stefan Fouant
-Original Message- From: juniper-nsp-boun...@puck.nether.net [mailto:juniper-nsp- boun...@puck.nether.net] On Behalf Of Devin Kennedy Sent: Thursday, April 21, 2011 11:33 AM To: juniper-nsp@puck.nether.net Subject: [j-nsp] Trying to get OSPF to work across IPsec for Redundancy