From 9340aca617e941e7c7d165aa9b2f353312a2865b Mon Sep 17 00:00:00 2001 From: goodNETnick Date: Thu, 7 Oct 2021 19:56:50 +1000 Subject: Warning about IPsec and VTI interfaces --- docs/configuration/interfaces/vti.rst | 10 ++++++++-- 1 file changed, 8 insertions(+), 2 deletions(-) (limited to 'docs/configuration/interfaces/vti.rst') diff --git a/docs/configuration/interfaces/vti.rst b/docs/configuration/interfaces/vti.rst index 34842866..cb25773d 100644 --- a/docs/configuration/interfaces/vti.rst +++ b/docs/configuration/interfaces/vti.rst @@ -3,7 +3,6 @@ ############################## VTI - Virtual Tunnel Interface ############################## - Set Virtual Tunnel Interface .. code-block:: none @@ -20,4 +19,11 @@ Results in: address 192.168.2.249/30 address 2001:db8:2::249/64 description "Description" - } \ No newline at end of file + } + +.. warning:: When using site-to-site IPsec with VTI interfaces, + be sure to disable route autoinstall + +.. code-block:: none + + set vpn ipsec options disable-route-autoinstall \ No newline at end of file -- cgit v1.2.3