Routing for IPSec tunnel
Posted
by Emre A
on Server Fault
See other posts from Server Fault
or by Emre A
Published on 2010-06-08T12:49:20Z
Indexed on
2010/06/08
12:52 UTC
Read the original article
Hit count: 384
Hello. For Juniper NetScreen-NS25, I configured a site-to-site IPSec tunnnel. For the outside interface of remote site, I also needed to go through tunnel which has the same IP as IPSec gateway. Now, when I add static route to route that outside interface IP through tunnel while tunnel is up, there would be no problem at all but if the tunnel is down for some reason, it cannot be re-established as the routing for the IPSec gateway IP which is the same as outside interface IP is set to go through tunnel which it needed to re-etablish at that time. So, packets won't hit that IP. I tried adding another routing entry which has metric 2 through other gateway but it did'nt succeeded. So, what type of routing should I configure to reach that IP when tunnel is down. Thanks in advance.
© Server Fault or respective owner