GRE over IPsec Security

[n.steffen]

Hello!

i have a general security question. We have a MPL-VPN Network installed Site-to-Site with EIGRP Routing Protocol. Now we used one VLAN for every VPN Site only for Internet with a seperated Internetconnection. So, what is the best security for protect this seperated VLAN only for Internetconnection? At the moment we used GRE over IPSec its that the best Solution an secure?

thanks in advance

[bwalchez]

Best practices is keeping separate VLAN for internet user, which minise the attack risk.

VPN tunnel helps to protect your data ,while traveling in internet, GRE over IPSec gives Data Confidentiality and integrity .

Refer these links for more info:

http://www.cisco.com/en/US/tech/tk827/tk369/tk287/tsd_technology_support_sub-protocol_home.html

http://www.cisco.com/en/US/tech/tk1330/tsd_technology_support_technical_reference_chapter09186a008075971a.html