Peter Rathlev wrote:
Hi,
The traffic that doesn't get encrypted comes from a VRF Lite subinterface on the "back" of the 7200. This VRF has a static 0/0 route with a global next hop, and the global table has a static route pointing the other way.
Sure would make things simpler if inter-vrf traffic could be configured to appear as if it went through a logically defined interface.
On the other hand, you can actually do that manually, at the cost of handling the packets twice, either with physical interfaces or with tunnels.
_______________________________________________ cisco-nsp mailing list [email protected] https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
