I have a simple question but I can't clarify this point by googling.
I have box under R77.30 and IPsec community based VPN.
The IPsec is a legacy solution and I need to migrate some networks to L3VPN which available via 802.1Q subinterface on firewall.
By now, I use an aggregated prefix 10.0.0.0/8(at remote site) throught IPsec. I need migrate 10.1.1.0/24 to L3VPN.
Can I just make new static through L3VPN subinterface or I should change IPsec settings(exclude10.1.1.0/24 from encryption domain or etc.)?
The general point is where exactly the crypto policy is applyed.
Thanks in advance.