Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
New Member

IPSec/GRE with VRF?

I know that IPSec into MPLS VRF works now with 12.2(15)T, but the example don't show how to do it with GRE/IPSec. Does someone have a working config example of a GRE/IPSec terminating into an MPLS VRF.

Thanks,

Greg

2 REPLIES
Cisco Employee

Re: IPSec/GRE with VRF?

Hi Greg,

Actually for the VRF process the packets will still be IPSEc (As the GRE packet gets encapsulated into IPSec) So you can make sure that the configuration would be the same for MPLS and IPSec and any additional GRE config will not have any impact on the MPLS/VRF. The operation of the IPSec remians the same, but when that packet is to be routed, it look at it the vrf's routing table instead of the global routing table.

http://www.cisco.com/univercd/cc/td/doc/product/software/ios122/122newft/122t/122t15/ft_vrfip.htm#1201218

Hope this answers your question,

Regards,

Aamir Waheed,

Cisco Systems, Inc.

CCIE#8933

-=-=-

New Member

Re: IPSec/GRE with VRF?

Almost. So do I configure the GRE tunnel the same as if there was no VRF?

Same crypto map?

Do I need to add 'ip vrf forward' to the tunnel interface?

279
Views
0
Helpful
2
Replies
CreatePlease to create content