Forum Discussion

invisible's avatar
invisible
Icon for Nimbostratus rankNimbostratus
Apr 18, 2017

LTM 13.0 Unable to create IPSec with traffic domain other than 0

Two F5 LTM VE systems. upgraded to 13.0   The goal is to create IPSec Tunnel when traffic selector is at non-0 Route Domain. IPsec tunnel works(ed) with only route domain 0.   There are: 1. Tw...
application delivery
BIG-IP
big-ip ltm
ipsec
LTM
security
kkohegyi_165129's avatar
kkohegyi_165129
Icon for Nimbostratus rankNimbostratus

Hi,

 

The “interface” mode IPSec is working between route-domains.

 

But only one traffic-selector can be associated to IPSec channel so it is unusable if you want to use more encrypted subnets.

 

boneyard's avatar
boneyard
Icon for MVP rankMVP
Dec 23, 2017

thanks for the extra info.