Routing for IPSec tunnel

Posted by Emre A on Server Fault See other posts from Server Fault or by Emre A
Published on 2010-06-08T12:49:20Z Indexed on 2011/11/19 9:55 UTC
Read the original article Hit count: 411

For Juniper NetScreen-NS25, I configured a site-to-site IPSec tunnnel. For the outside interface of remote site, I also needed to go through tunnel which has the same IP as IPSec gateway. Now, when I add static route to route that outside interface IP through tunnel while tunnel is up, there would be no problem at all but if the tunnel is down for some reason, it cannot be re-established as the routing for the IPSec gateway IP which is the same as outside interface IP is set to go through tunnel which it needed to re-etablish at that time. So, packets won't hit that IP. I tried adding another routing entry which has metric 2 through other gateway but it did'nt succeeded. So, what type of routing should I configure to reach that IP when tunnel is down. Thanks in advance.

© Server Fault or respective owner

Related posts about ipsec

Related posts about site-to-site-vpn