I have a PE to CE connection via GRE tunnel with IPSec. When traffic comes from another remote PE (via a tag'ed link) I recive an error message
"%CRYPTO-4-RECVD_PKT_INV_IDENTITY: identity doesn't match negotiated identity".
(ip) dest_addr= 18.104.22.168, src_addr= 22.214.171.124, prot= 6
(ident) local=126.96.36.199, remote=188.8.131.52
The access-list for the Crypto map is GRE host 184.108.40.206 host. 220.127.116.11
It works just fine with no encryption.