Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

IPSec over GRE

hello,

I have one confusion in configuration of IPSec over GRE.

where should i apply Crypto Map command... under the tunnel interface or under the physical interface of the router?

what is difference between both the configuration?

2 REPLIES
Hall of Fame Super Silver

Re: IPSec over GRE

Dan

The answer to your question depends on the version of code that you are running. In older versions of IOS you need to put the crypto map on both the physical output interface and the tunnel interface. In more recent versions of code you should put the crypto map only on the physical output interface.

HTH

Rick

New Member

Re: IPSec over GRE

so there is no other technical difference???

is that some thing like when i apply the crypto map to Tunnel interface then IPSec packet is encapsulated with GRE header and if i will apply it on Physical interface then GRE packet will be encapsulated witht he IPSec header???

109
Views
0
Helpful
2
Replies