On Tue, Jan 8, 2013 at 9:39 AM, m...@privateit.net <m...@privateit.net> wrote:
> gretap fixed my GRE tunneling issue, thank you...
>
> However, ipsec between the two systems is now “broken”.   If the ipsec
> tunnel is shutdown and the GRE tunnels are up, we can route without
> problem.  If the ipsec tunnel is up, GRE packets from the iproute2 box
> (cash) appear to be ipsec encapsulated, packets from Tango (OVS) seem to
> arrive without ipsec encapsulation.

On the OVS tunnel configuration you need to set header_cache=false in
order to traverse the IPsec stack.
_______________________________________________
discuss mailing list
discuss@openvswitch.org
http://openvswitch.org/mailman/listinfo/discuss

Reply via email to