From: Sam Munzani (sam@xxxxxxxxxxx)
Date: Fri Jun 15 2001 - 12:12:09 GMT-3
You are absolutely correct.
Sam
> Can you explain a bit more about the GRE Tunnel and the PIX?
>
> You can allow GRE through a PIX but I am pretty sure that you cannot
> terminate a GRE tunnel on a PIX Interface.
>
> Cheers
>
>
> Andrew.
>
> -----Original Message-----
> From: nobody@groupstudy.com [mailto:nobody@groupstudy.com]On Behalf Of
> jhuston
> Sent: 15 June 2001 15:11
> To: ccielab@groupstudy.com
> Subject: RE: IPSec and GRE
>
>
> I know in the cases that I have worked on, that a GRE tunnel clear up
> timing problems between the various interfaces of a PIX, Router and
> mobile users. I agree that it seems to be a conservative approach but a
> workable one.
>
>
>
> > -----Original Message-----
> > From: Andrew G. Mason [mailto:andrew@masontech.com]
> > Sent: Thursday, June 14, 2001 5:40 PM
> > To: ccielab@groupstudy.com
> > Subject: IPSec and GRE
> >
> >
> > Hi,
> >
> > I see quite a few posts and recommendations to use GRE
> > tunnels with IPSec.
> > This confuses me because IPSec performs tunnelling in its default
> > configuration anyway so I cannot see any reason for
> > tunnelling through a
> > tunnel?
> >
> > Can anybody give a good reason to use a GRE tunnel instead of
> > the default
> > IPSec tunnel mode configuration?
> >
> > Cheers
> >
> >
> > Andrew G. Mason
> > CCIE #7144
> > **Please read:http://www.groupstudy.com/list/posting.html
> **Please read:http://www.groupstudy.com/list/posting.html
> **Please read:http://www.groupstudy.com/list/posting.html
**Please read:http://www.groupstudy.com/list/posting.html
This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:31:24 GMT-3