Can your run IPSEC on multiple GRE tunnels in a 2811 router?

Unanswered Question
Jul 16th, 2008
User Badges:

I have a 2811 router with multiple tunnels defined to other 2811's. I want to encrypt the traffic in each tunnel using ipsec. Since the crypto map only has one active peer and the map is applied to the physical Ethernet interface in my 2811 I have not been able to encrypt traffic on more than one tunnel. Basically my hub router has the multiple tunnels but I've only been able to successfully encrypt one tunnel at a time on that router. Any suggestions would be appreciated.



  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
a.alekseev Wed, 07/16/2008 - 14:08
User Badges:
  • Gold, 750 points or more

use tunnel protection....

crypto isakmp policy 1

encr 3des

authentication pre-share

group 2

crypto isakmp key Cisco12345 address

crypto IPsec transform-set T1 esp-3des esp-sha-hmac

crypto IPsec profile P1

set transform-set T1


interface Tunnel0

ip address

ip ospf mtu-ignore

load-interval 30

tunnel source

tunnel destination

tunnel protection IPsec profile P1


interface Ethernet3/0

ip address

duplex full



This Discussion