Hot answers tagged

2

Site B is missing the route for 192.168.198.0/24 pointing into the tunnel. Without it, the packet leaks out to WAN. You need to either set up a static route or configure OSPF between the firewalls (requires 'always-on' VPN).


1

GRE and IPsec aren't one-to-many technologies. Thus multicast/broadcast doesn't have much meaning. That said, there are ways to push multicast across either system -- both sender and receiver -- but few systems actually support it. It's far easier, and less headache, to setup multicast routing. (This is even more true when tunnel interfaces are being used, i....


1

IPSec works in both tunnel and transport mode. In transport mode, a security association is set up between the two endpoints. To set up a "multipoint" SA requires a different mechanism for authentication and encryption. I assume the committee decided that broadcast traffic wan't important enough to create a separate mechanism for multipoint ...


Only top voted, non community-wiki answers of a minimum length are eligible