06-13-2007 07:02 AM - edited 03-03-2019 05:25 PM
hello,
I have one confusion in configuration of IPSec over GRE.
where should i apply Crypto Map command... under the tunnel interface or under the physical interface of the router?
what is difference between both the configuration?
06-13-2007 07:08 AM
Dan
The answer to your question depends on the version of code that you are running. In older versions of IOS you need to put the crypto map on both the physical output interface and the tunnel interface. In more recent versions of code you should put the crypto map only on the physical output interface.
HTH
Rick
06-13-2007 07:17 AM
so there is no other technical difference???
is that some thing like when i apply the crypto map to Tunnel interface then IPSec packet is encapsulated with GRE header and if i will apply it on Physical interface then GRE packet will be encapsulated witht he IPSec header???
Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: