cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
209
Views
0
Helpful
1
Replies

Ho do I allow pings to an IPSEC/GRE interface?

blmoulton
Level 1
Level 1

Is there a way to allow pings to my public interface IP after applying a GRE crypto map?

I am using IPSEC/GRE tunnels with the endpoints as the public facing IP on each router. My crytpo map ACL only allows GRE between the endpoints. After I apply the crypto map to the public interface, I can no longer ping it. My provider needs to ping the IP on my side to manage/monitor the interface. Is that possible with GRE?

1 Reply 1

aacole
Level 5
Level 5

I've just tried pinging an Interface that is set up this way, terminating a GRE/IPSec tunnel, I get a reply.

Have you an ACL on the public facing port that's dropping the ICMP packets, the one I've just tried allows ICMP echo replies to be returned.