On Tue, 2010-03-09 at 10:49 +0000, Phil Mayers wrote: > > I the tried changing the ISAKMP profile VRF, et voila, it worked. :-) > > > > I have reloaded the box to make sure it's not just good luck that it > > works now. It seems to work fine after a reload, with MPLS on the core > > facing interfaces. > > Interesting. Are the packets arriving at the box labelled?
Yes, though just with the VPN label because of penultimate hop popping. And the encrypted traffic leaves the box tagged too. -- Peter _______________________________________________ cisco-nsp mailing list cisco-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/cisco-nsp archive at http://puck.nether.net/pipermail/cisco-nsp/
