Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

Quick Question:IPSEC/GRE Crypto Map

Where is it better to apply the crypto map statement in an IPSEC/GRE setup? Is it advisable to apply it on the GRE interface or on the outgoing physical interface? Thanks.

Regards,

John

1 REPLY
Hall of Fame Super Blue

Re: Quick Question:IPSEC/GRE Crypto Map

Hi John

It depends on your IOS level. From cisco doc

=============================================

IOS Configuration Note: With Cisco IOS 12.2(13)T and later codes (higher numbered T-train codes, 12.3 and later codes) the configured IPSEC "crypto map" only needs to be applied to the physical interface and is no longer required to be applied on the GRE tunnel interface. Having the "crypto map" on the physical and tunnel interface when using the 12.2.(13)T and later codes still works. However, it is highly recommended to apply it just on the physical interface.

=============================================

HTH

Jon

114
Views
0
Helpful
1
Replies
CreatePlease login to create content