11-13-2008 10:46 AM - edited 03-04-2019 12:19 AM
Which one would you prefer, VTI or GRE?
As far as I know, VTI has less overhead, less configuration CLI while it does not provide keep alive.
11-13-2008 01:19 PM
If the VTI (virtual tunnel interface) you're thinking of is the one used by IPSec, it would seem to have more overhead and more configuation than just GRE. Or where you thinking VTI vs. IPSec/GRE tunnel?
11-13-2008 01:52 PM
Yes, you are right. GRE over IPsec. Thanks for correcting me.
05-08-2010 04:47 AM
Hi,
GRE headers adds extra 4 bytes, thus reducing the bandwidth for sending encrypted data.
See attachment.
And info from http://www.nil.com/ipcorner/IPsecVPN3/
"The main difference is that VTIs only support IP (unicast and multicast), while GRE also supports other protocols. VTIs also were not available on all platforms when they were first introduced."
Kind regards,
Michal
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide