cancel
Showing results for 
Search instead for 
Did you mean: 

FIGW - IPSEC + VXLAN + FRAGMENTATION AND REASSEMBLY over L2 link

FIGW - IPSEC + VXLAN + FRAGMENTATION AND REASSEMBLY over L2 link

EF
Contributor II
Hi team,

In a L2 connection through ISP with MTU less of 1600bytes, I´m using FIGWs for fabric extend (VXLAN) and fragmentation & reassembly to establish isis adjacencies  without problem.

Now I want to add IPSEC but I review all the topologies avalaible for IPSEC and all of them are trought L3, the question is, in a link L2 is IPSEC topology supported?

Regards

EF
1 ACCEPTED SOLUTION

Miguel-Angel_RO
Valued Contributor II
EF,

IPSEC is always over L3. MACSEC is over L2.
Here a possible setup
bcc6d49f81314676b3ada78d661674f7.pngMig

View solution in original post

5 REPLIES 5

Hi Ludovico,

this is the problem, if I´m not wrong,  that "set global wan-intf-gw-ip  " is mandatory for IPSEC config, but in a l2 connection I dont have it.

Regards

EF
GTM-P2G8KFN