Re: Ipsec over gre tunnel

From: Carlos G Mendioroz (tron@xxxxxxxxxxx)
Date: Thu May 16 2002 - 18:43:57 GMT-3


   
I wonder: what are the reasons to build an IPSec tunnel over a GRE
tunnel ?

I can imagine reasons for the other way arround (like encypting some
other protocol using IPSEC)...

Erhan Kurt wrote:
>
> In Ipsec, it's better to choose both IOS are the same.
>
> Additionally, make sure:
> - to put your crypto map on both tunnel and physical interfaces
> - to use extended ip access list with exact source and destination
>
> Never Give Up,
> Erhan
>
> -----Original Message-----
> From: Paul [mailto:p_chopin@yahoo.com]
> Sent: 16 May}s 2002 Per~embe 10:49
> To: ccielab@groupstudy.com
> Subject:
>
> Hi guys
> Did anybody experience problems working on lab 22
> from CCIE Bootcamp?I try to make work vpn part of the
> lab, but somehow Ipsec doesn't work over the tunnel.My
> configs look exactly as the one submitted with the
> lab.
> I wonder is there trick to running Ipsec over gre
> tunnel.
> Paul

--
Carlos G Mendioroz  <tron@huapi.ba.ar>  LW7 EQI  Argentina


This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:58:58 GMT-3