Re: ospf/gre or bgp over ipsec instead of cisco?

[Stephen Marley <stephen_(_dot_)_marley_(_at_)_catwoman_(_dot_)_cl-is_(_dot_)_com>]

On Thu, May 05, 2005 at 07:49:10AM +0200, Esben Norby wrote:
> On Tuesday 03 May 2005 23:47, Stephen Marley wrote:
> > Can anyone forsee any problems doing this with the current state of ospf
> > within openbsd? Or gif instead of gre perhaps?
> 
> One of the things that usally comes back and bites you is the lack of 
> multicast support (or buggy multicast support). All (well almost all) OSPF 
> signalling is sent as multicast traffic. A gre tunnel should handle that 
> fine, haven't tried it but it seems it's just a point-to-point device.
> 
> The currnet state of ospfd should be enough to test your setup, and feedback 
> from such a test would be greatly appreciated.

I have done some preliminary tests over ipsec/gre and ipsec/gif. I need
to rejig the set up a bit, but I will post back more details when I'm
ready. Watch this space.

-- 
stephen_(_at_)_cl-is_(_dot_)_com