I have a situation where it is required to do NAT with different pool when passing through GRE tunnel and through Serial interface directly to Internet. The GRE traffic is also encrypted using IPSec tunnel.
I intend to do CBAC inspection at the outside interface for Internet traffic; however for the traffic passing through the GRE tunnel, I plan to use CBAC inspection on Tunnel interface. My question is whether it is possible to configure CBAC inspection at the Tunnel interface. The router is also the GRE and IPSec tunnel end point.
Otherwise is there a better way to implement CBAC; like applying CBAC on inside interface. There are only two interfaces in the router.