Re: IPSEC and IP CEF

From: Ovais Iqbal (ovais.iqball@yahoo.com)
Date: Wed Nov 19 2008 - 05:43:24 ARST


Dear Haroon, IPsec works fine with IP cef and i havent observed any issues regarding it ever !!. However site to site vpn ( and others also) rely heavily on your underlying routing. So maybe if you are using cef router may be using some other path then what you expected and this might cause vpn to terminate. Check out your routing and let us know how your vpn endpoints are connected to each other.

--- On Wed, 11/19/08, Haroon <itguy.pro@gmail.com> wrote:
From: Haroon <itguy.pro@gmail.com>
Subject: IPSEC and IP CEF
To: "Cisco certification" <ccielab@groupstudy.com>
Date: Wednesday, November 19, 2008, 6:35 AM

Hi Experts,

Does IP CEF need to be enabled on both ends of a site to site IPSEC vpn for
it to work?

I am running into issues where if I enable ip cef on the main router, the
connections to other sites drops and comes back up immediately if disabled.

Is this a bug or am I missing something?

Thanks,

Haroon

Blogs and organic groups at http://www.ccie.net



This archive was generated by hypermail 2.1.4 : Mon Dec 01 2008 - 08:18:31 ARST