Re: Ipsec over gre tunnel

From: elpingu (elping@xxxxxxxxxx)
Date: Thu May 16 2002 - 20:03:56 GMT-3


   
to secure routing protocols

Carlos G Mendioroz wrote:

> I wonder: what are the reasons to build an IPSec tunnel over a GRE
> tunnel ?
>
> I can imagine reasons for the other way arround (like encypting some
> other protocol using IPSEC)...
>
> Erhan Kurt wrote:
> >
> > In Ipsec, it's better to choose both IOS are the same.
> >
> > Additionally, make sure:
> > - to put your crypto map on both tunnel and physical interfaces
> > - to use extended ip access list with exact source and destination
> >
> > Never Give Up,
> > Erhan
> >
> > -----Original Message-----
> > From: Paul [mailto:p_chopin@yahoo.com]
> > Sent: 16 May}s 2002 Per~embe 10:49
> > To: ccielab@groupstudy.com
> > Subject:
> >
> > Hi guys
> > Did anybody experience problems working on lab 22
> > from CCIE Bootcamp?I try to make work vpn part of the
> > lab, but somehow Ipsec doesn't work over the tunnel.My
> > configs look exactly as the one submitted with the
> > lab.
> > I wonder is there trick to running Ipsec over gre
> > tunnel.
> > Paul
>
> --
> Carlos G Mendioroz <tron@huapi.ba.ar> LW7 EQI Argentina



This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:58:58 GMT-3