I'd like to set up a GRE-over-IPSec link where one tunnel endpoint is dynamic.
I know that IPSec is possible with one side dynamic (using 0.0.0.0 as the peer address), but I'm less certain about GRE (normally, of course, "tunnel source" and "tunnel destination" are both needed (though "source" may be implicit)).
Is this possible? NHRP looks like it comes close, but not sure it will do the trick.