Re: IPSEC and GRE

From: Jake (jakeczyz@xxxxxxxxx)
Date: Sat Jul 27 2002 - 16:56:25 GMT-3


   
Everyone,

What Prakash is talking about can be found here:
<http://www.cisco.com/networkers/nw01/pres/index.html>

This is a fantastic repository of all the presentations at networkers 2001 in P
DF format.
I don't think the slides from NW2002 have been published to the site yet. So, i
f your
company (like mine) is unwilling to send you to these wonderful events, at leas
t you can
check out the great presentations.

Also, this one's for the 2000 networkers; although old, some of it is still wor
th looking
at:

<http://www.cisco.com/networkers/nw00/pres/>

HTH,
Jake
9102

--- Prakash H Somani <pdsccie@rediffmail.com> wrote:
> Hi,
>
> I suggest you go to networkder 2001 and read a presentation given
> on IPSec implementation on large enterprises...ITs a good
> presentation.
>
> regards...Prakash
>
> On Thu, 25 Jul 2002 Anthony Pace wrote :
> >To encrypt a GRE tunnel is it best to apply the crypto map to the
> >GRE
> >tunnel interface or the real interface(s) the traffic will
> >ultimatly
> >traverse. If the answer is both, then do I set up the access-list
> >to
> >encrypt all IP or just GRE traffic.
> >
> >I would think that if you applied the map to the real interface,
> >and
> >the ACL matched GRE then it would work.
> >
> >I would think that if you appplied the map to the GRE, and the
> >ACL
> >matched all IP then it would also work.
> >
> >The examples I have seen put it on both. What is the difference
> >and
> >does it matter?
> >
> >Anthony Pace
> >--
> > Anthony Pace
> > anthonypace@fastmail.fm
> >
> >--
> >http://fastmail.fm - Email service worth paying for. Try it for
> >free.



This archive was generated by hypermail 2.1.4 : Sat Sep 07 2002 - 19:36:46 GMT-3