IPSec over GRE

Unanswered Question
Jun 13th, 2007


I have one confusion in configuration of IPSec over GRE.

where should i apply Crypto Map command... under the tunnel interface or under the physical interface of the router?

what is difference between both the configuration?

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
Richard Burts Wed, 06/13/2007 - 07:08


The answer to your question depends on the version of code that you are running. In older versions of IOS you need to put the crypto map on both the physical output interface and the tunnel interface. In more recent versions of code you should put the crypto map only on the physical output interface.



dangal.43 Wed, 06/13/2007 - 07:17

so there is no other technical difference???

is that some thing like when i apply the crypto map to Tunnel interface then IPSec packet is encapsulated with GRE header and if i will apply it on Physical interface then GRE packet will be encapsulated witht he IPSec header???


This Discussion