topic Re: Could IPsecVPN use PBF instead of routing? in General Topics

Could IPsecVPN use PBF instead of routing?

ttongfly — Fri, 13 Jan 2012 02:11:09 GMT

Hello guys.

I have a question about IPSEC VPN tunnel and is IPSEC VPN can use PBF instead of routing or not.

I think that tunnel interface could have ip-address (for tunnel monitoring) so I guess IPSEC VPN tunnel could use PBF instead of routing?!

So I tested about that but its faild. so I wonder about it caused my missed configuration or PAN could not support IPSEC VPN with PBF.

Please let me know above question.

Thanks.

Regards.

Roh.

Re: Could IPsecVPN use PBF instead of routing?

jdelio — Wed, 18 Jan 2012 00:03:20 GMT

In order to get this to work properly, you need to have 2 VR's with routes, and then the PBF will overide the routes.

Re: Could IPsecVPN use PBF instead of routing?

ttongfly — Wed, 18 Jan 2012 01:05:13 GMT

Hello jdelio

I tested again and then PBF was worked properly for IPsecVPN traffic and missed configuration when PBF not to do.

Thanks.

Regards.

Roh.

Re: Could IPsecVPN use PBF instead of routing?

rparamati — Wed, 15 May 2013 12:20:44 GMT

Hi Roh,

I have a similar scenario PBF with IPSec VPN's ..

Is it working fine for you.. if so can u please share a document or config of it.

Regards

Raj

Re: Could IPsecVPN use PBF instead of routing?

Retired Member — Thu, 16 May 2013 08:00:02 GMT

Hello rparamati.

Unfortunately I don't have sample configuration for IPSecVPN with PBF that I tested. You can configure the IP to tunnel interface of both side of PAN and forward the traffic to tunnel interface using PBF rule.

If I have a chance to have testing IPSecVPN with PBF again, I will provide you a configuration of PAN.

Thanks.

Regards,

Roh