Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Community Member

Ho do I allow pings to an IPSEC/GRE interface?

Is there a way to allow pings to my public interface IP after applying a GRE crypto map?

I am using IPSEC/GRE tunnels with the endpoints as the public facing IP on each router. My crytpo map ACL only allows GRE between the endpoints. After I apply the crypto map to the public interface, I can no longer ping it. My provider needs to ping the IP on my side to manage/monitor the interface. Is that possible with GRE?

1 REPLY
Silver

Re: Ho do I allow pings to an IPSEC/GRE interface?

I've just tried pinging an Interface that is set up this way, terminating a GRE/IPSec tunnel, I get a reply.

Have you an ACL on the public facing port that's dropping the ICMP packets, the one I've just tried allows ICMP echo replies to be returned.

97
Views
0
Helpful
1
Replies
CreatePlease to create content