Can CBAC be configured on GRE Tunnel interface?

r.nair · ‎07-17-2003

I have a situation where it is required to do NAT with different pool when passing through GRE tunnel and through Serial interface directly to Internet. The GRE traffic is also encrypted using IPSec tunnel.

I intend to do CBAC inspection at the outside interface for Internet traffic; however for the traffic passing through the GRE tunnel, I plan to use CBAC inspection on Tunnel interface. My question is whether it is possible to configure CBAC inspection at the Tunnel interface. The router is also the GRE and IPSec tunnel end point.

Otherwise is there a better way to implement CBAC; like applying CBAC on inside interface. There are only two interfaces in the router.

Regards

Raj

drolemc · ‎07-25-2003

Yes, CBAC can be configured with GRE over IPSec tunnels. For an example, please see http://www.cisco.com/warp/public/707/dmvpn-gre-ospf.html. In this example, the tunnel source is the FastEthernet0/0 and CBAC is applied to it.