Solved: VPN3K FEATURE REQUEST: IPSec encapsulation of Multicast packet

engel · ‎03-18-2003

Dear All,

Just downloaded the Internet draft of "IP Multicast issues with IPSec" authored by two Cisco engineers. Seems like there is a progress to encapsulate multicast packet within IPSec. Since the draft is written by Cisco engineers, do the VPN3K`s developers consider to implement this feature on the next firmware release ? FYI , Netscreen devices are able to encapsulate OSPF packets within the IPSec tunnel. I am wondering when the Cisco VPN3K will have this capability too.

Regards,

Engel

afakhan · ‎03-18-2003

Hi,

Its planned for vpn3000 concentrator but no committed dates as of yet, a router can be used to encapsulate multicast traffic inside GRE, and vpn3k can encrypt GRE traffic just fine.

Thanks,

Afaq

View solution in original post

afakhan · ‎03-18-2003

Hi,

Its planned for vpn3000 concentrator but no committed dates as of yet, a router can be used to encapsulate multicast traffic inside GRE, and vpn3k can encrypt GRE traffic just fine.

Thanks,

Afaq

engel · ‎03-18-2003

Hi,

Thanks for the information! I am aware about the solution to use GRE to encapsulate the OSPF and then encrypted it with IPSec. This has been discussed a lot on this forum and we have implemented it to some of our customers.

But the disadvantage of this solution is one has to put two routers behind the VPN3K to termincate the GRE tunnel, because VPN3K doesn`t have the capability to speak GRE. With NetScreen solution, it is very easy to do dynamic routing (with multicast speaking routing protocol such EIGRP, OSPF). And this is my main concern, because we are having difficulties to provide VPN3K solution to the customer, when the competitor comes with NetScreen solution to do encrypted dynamic routing through the Internet.

Regards,

Engel