[strongSwan] VTI with IPv4 over IPv6 Tunnel

2017-07-19 Thread Benjamin Beier
Hello, I have a working IPsec setup (IPv4 Net-Net over IPv6 Host-Host tunnel) including a properly configured firewall. Its been running fine for some month, but now I have a new requirement that needs Virtual Transport Interfaces (VTI) on both sides of the tunnel. Sadly I am really struggling

Re: [strongSwan] VTI with IPv4 over IPv6 Tunnel

2017-07-20 Thread Benjamin Beier
Actually I just need the interfaces so OSPF is happy. After wasting some more hours of time with VTIs, I decided to try GRE and well... it just works. :) Though I have heard and read that GRE is considered quite a dirty protocol. I also heard that Libreswan provides better support for VTIs than

Re: [strongSwan] VTI with IPv4 over IPv6 Tunnel

2017-07-21 Thread Noel Kuntze
Hi Bejnamin, On 21.07.2017 00:59, Benjamin Beier wrote: > Actually I just need the interfaces so OSPF is happy. > After wasting some more hours of time with VTIs, I decided to try GRE and > well... it just works. :) > Though I have heard and read that GRE is considered quite a dirty protocol. No