×

Warning message

  • Cisco Support Forums is in Read Only mode while the site is being migrated.
  • Cisco Support Forums is in Read Only mode while the site is being migrated.

VPN3K FEATURE REQUEST: IPSec encapsulation of Multicast packet

Answered Question
Mar 18th, 2003
User Badges:

Dear All,

Just downloaded the Internet draft of "IP Multicast issues with IPSec" authored by two Cisco engineers. Seems like there is a progress to encapsulate multicast packet within IPSec. Since the draft is written by Cisco engineers, do the VPN3K`s developers consider to implement this feature on the next firmware release ? FYI , Netscreen devices are able to encapsulate OSPF packets within the IPSec tunnel. I am wondering when the Cisco VPN3K will have this capability too.


Regards,

Engel

Correct Answer by afakhan about 14 years 5 months ago

Hi,


Its planned for vpn3000 concentrator but no committed dates as of yet, a router can be used to encapsulate multicast traffic inside GRE, and vpn3k can encrypt GRE traffic just fine.


Thanks,

Afaq

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 4 (1 ratings)
Loading.
Correct Answer
afakhan Tue, 03/18/2003 - 17:57
User Badges:
  • Bronze, 100 points or more

Hi,


Its planned for vpn3000 concentrator but no committed dates as of yet, a router can be used to encapsulate multicast traffic inside GRE, and vpn3k can encrypt GRE traffic just fine.


Thanks,

Afaq

engel Tue, 03/18/2003 - 18:40
User Badges:

Hi,

Thanks for the information! I am aware about the solution to use GRE to encapsulate the OSPF and then encrypted it with IPSec. This has been discussed a lot on this forum and we have implemented it to some of our customers.

But the disadvantage of this solution is one has to put two routers behind the VPN3K to termincate the GRE tunnel, because VPN3K doesn`t have the capability to speak GRE. With NetScreen solution, it is very easy to do dynamic routing (with multicast speaking routing protocol such EIGRP, OSPF). And this is my main concern, because we are having difficulties to provide VPN3K solution to the customer, when the competitor comes with NetScreen solution to do encrypted dynamic routing through the Internet.


Regards,

Engel

Actions

This Discussion