Difference between GREoverIPsec and VTI ?

Answered Question
Dec 12th, 2008

Hi all,

I compared three of the various ways to set up an IPsec connection and have a little difficulty to see the details:

1. Build a GRE tunnel (interface), then define GRE traffic as interesting in the CryptoACL, build the according CryptoMap.

2. Build a GRE tunnel (interface) and apply a CryptoProfile. Tunnel Mode is GRE.

3. Build a tunnel (interface) and set the mode the ipsec. Apply an CryptoProfile.

Are these just different versions to do the same thing ? If not, what are the little differences ?

Thanks in advance,


I have this problem too.
0 votes
Correct Answer by Farrukh Haroon about 7 years 10 months ago

There are many differences, please check this document:


Specially check pg 43 of 56 (Table 3).



  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 5 (1 ratings)
keller.oliver Mon, 12/15/2008 - 10:20

Hi Farrukh,

thanks, this was precisely the information I was looking for !




This Discussion