IPSec over GRE

Unanswered Question
Jun 13th, 2007
User Badges:


I have one confusion in configuration of IPSec over GRE.

where should i apply Crypto Map command... under the tunnel interface or under the physical interface of the router?

what is difference between both the configuration?

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Richard Burts Wed, 06/13/2007 - 07:08
User Badges:
  • Super Silver, 17500 points or more
  • Hall of Fame,

    Founding Member

  • Cisco Designated VIP,

    2017 LAN, WAN


The answer to your question depends on the version of code that you are running. In older versions of IOS you need to put the crypto map on both the physical output interface and the tunnel interface. In more recent versions of code you should put the crypto map only on the physical output interface.



dangal.43 Wed, 06/13/2007 - 07:17
User Badges:

so there is no other technical difference???

is that some thing like when i apply the crypto map to Tunnel interface then IPSec packet is encapsulated with GRE header and if i will apply it on Physical interface then GRE packet will be encapsulated witht he IPSec header???


This Discussion