Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. If you'd prefer to explore, try our test area to get started. And see here for current known issues.

New Member

GRE over IPsec, ASA and NAT-T

I want to establish GRE over IPsec tunnel between four branch offices and head office. At branch offices, I have 1841 router with Advanced Security software. At head office, I have a ASA5510 7.2 as frontend with one public IP addres and 1841 router behind it in private address space. Since ASA is not supporting GRE tunnels, can ASA be endpoint for GRE over IPsec? If not, can ASA pass this tunnel to the 1841 router behind it, so 1841 would be logical tunnel endpoint? What should I pay attention? Should both ASA and every 1841 support NAT-T, or just ASA?

1 ACCEPTED SOLUTION

Accepted Solutions

GRE over IPsec, ASA and NAT-T

The ASA does not support GRE.

The router would be the GRE tunnel end point.  The ASA would be the endpoint for the IPSEC VPN.  NAT-T should not be a concern, if the ASA and the remote routers are directy connected to the internet.

HTH.

1 REPLY

GRE over IPsec, ASA and NAT-T

The ASA does not support GRE.

The router would be the GRE tunnel end point.  The ASA would be the endpoint for the IPSEC VPN.  NAT-T should not be a concern, if the ASA and the remote routers are directy connected to the internet.

HTH.

1418
Views
0
Helpful
1
Replies