On Tue, Jan 8, 2013 at 9:39 AM, m...@privateit.net <m...@privateit.net> wrote: > gretap fixed my GRE tunneling issue, thank you... > > However, ipsec between the two systems is now “broken”. If the ipsec > tunnel is shutdown and the GRE tunnels are up, we can route without > problem. If the ipsec tunnel is up, GRE packets from the iproute2 box > (cash) appear to be ipsec encapsulated, packets from Tango (OVS) seem to > arrive without ipsec encapsulation.
On the OVS tunnel configuration you need to set header_cache=false in order to traverse the IPsec stack. _______________________________________________ discuss mailing list discuss@openvswitch.org http://openvswitch.org/mailman/listinfo/discuss