Buy or Renew
Buy or Renew
Duo Security forums now LIVE! Get answers to all your Duo Security questions. Learn more
cancel
Turn on suggestions
Auto-suggest helps you quickly narrow down your search results by suggesting possible matches as you type.
Showing results for 
Search instead for 
Did you mean: 
cancel
Create a new article
1181
Views
0
Helpful
0
Comments

The Tunnel Protection configuration with GRE does not work with the VPN SPA module in the CAT 6500

TCC_2
Level 10
Level 10

‎06-17-2009 10:15 PM - edited ‎03-08-2019 06:01 PM

Core issue

This happens because tunnel protection is not supported in crypto connect mode on the CAT 6500.

The Tunnel Protection IPSec profile does work on the CAT 6500, but only for one tunnel.

Resolution

As a workaround, use the crypto map command and plain Generic Routing Encapsulation (GRE) tunnels without the tunnel protection command on them.

Note: Tunnel protection works only in VRF mode.

Refer to Configuring the IPSec VPN SPA for additional information.

Labels:
0 Helpful
Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Customers Also Viewed These Support Documents