Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

IPSEC GRE

Hi,

Configured the IPSEC that will encrypt the GRE traffic and it forms OSPF neighbor relationship.

In the configuration crypto map was applied to the physical serial interface facing the outside world.

( crypto ACL match the GRE portocol packets )

IS there any way with which we can configure the crypto map on the tunnel interface?

If we need to apply crypto map to tunnel interface, then what changes do we need in the crypto access-list and peering host IP?

Please see the working GRE- IPSEC configurations attached.

Please share the experience.

Thanks inadvance

Cheers.

Subodh

1 ACCEPTED SOLUTION

Accepted Solutions
Hall of Fame Super Silver

IPSEC GRE

Hello Subodh,

the current way to configure GRE over IPSec is the use of crypto map over the WAN physical interface like you have done.

I may be wrong, but configuration of crypto map over the GRE Tunnel interface was used in old IOS in some previous implementation.

You should be fine with your configuration and the OSPF adjacency over GRE over IPSEC provides a good confirmation that everything is working well

Hope to help

Giuseppe

2 REPLIES
Hall of Fame Super Silver

IPSEC GRE

Hello Subodh,

the current way to configure GRE over IPSec is the use of crypto map over the WAN physical interface like you have done.

I may be wrong, but configuration of crypto map over the GRE Tunnel interface was used in old IOS in some previous implementation.

You should be fine with your configuration and the OSPF adjacency over GRE over IPSEC provides a good confirmation that everything is working well

Hope to help

Giuseppe

New Member

IPSEC GRE

Thanks. Giuseppe.

130
Views
0
Helpful
2
Replies