Hi,
Well, Site to Site does not support multicast traffic.
http://www.ietf.org/rfc/rfc2401.txt
4.1 Definition and Scope
A Security Association (SA) is a simplex "connection" that affords
security services to the traffic carried by it. Security services
are afforded to an SA by the use of AH, or ESP, but not both. If
both AH and ESP protection is applied to a traffic stream, then two
(or more) SAs are created to afford protection to the traffic stream.
To secure typical, bi-directional communication between two hosts, or
between two security gateways, two Security Associations (one in each
direction) are required.
A security association is uniquely identified by a triple consisting
of a Security Parameter Index (SPI), an IP Destination Address, and a
security protocol (AH or ESP) identifier. In principle, the
Destination Address may be a unicast address, an IP broadcast
address, or a multicast group address. However, IPsec SA management
mechanisms currently are defined only for unicast SAs.
The only possible mechanism is to use GRE over IPSec.
I hope this helps.
Regards,
Abhishek Purohit
CCIE-S- 35269
Regards,
Abhishek Purohit
CCIE-S- 35269
