Re: IPSEC and GRE

From: Prakash H Somani (pdsccie@xxxxxxxxxxxxxx)
Date: Sat Jul 27 2002 - 12:00:01 GMT-3

• Next message: G. R. Correia: "Ospf Router ID"
• Previous message: Fanglo MA: "Re: Cisco type 5 password decrypter"
• Maybe in reply to: Anthony Pace: "IPSEC and GRE"
• Next in thread: Jake: "Re: IPSEC and GRE"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

   
Hi,

I suggest you go to networkder 2001 and read a presentation given
on IPSec implementation on large enterprises...ITs a good
presentation.

regards...Prakash

On Thu, 25 Jul 2002 Anthony Pace wrote :
>To encrypt a GRE tunnel is it best to apply the crypto map to the
>GRE
>tunnel interface or the real interface(s) the traffic will
>ultimatly
>traverse. If the answer is both, then do I set up the access-list
>to
>encrypt all IP or just GRE traffic.
>
>I would think that if you applied the map to the real interface,
>and
>the ACL matched GRE then it would work.
>
>I would think that if you appplied the map to the GRE, and the
>ACL
>matched all IP then it would also work.
>
>The examples I have seen put it on both. What is the difference
>and
>does it matter?
>
>Anthony Pace
>--
> Anthony Pace
> anthonypace@fastmail.fm
>
>--
>http://fastmail.fm - Email service worth paying for. Try it for
>free.

• Next message: G. R. Correia: "Ospf Router ID"
• Previous message: Fanglo MA: "Re: Cisco type 5 password decrypter"
• Maybe in reply to: Anthony Pace: "IPSEC and GRE"
• Next in thread: Jake: "Re: IPSEC and GRE"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.4 : Sat Sep 07 2002 - 19:36:46 GMT-3