RE: IPSEC and GRE

From: Tim O'Brien (tobrien@xxxxxxxxxxxx)
Date: Sat Jul 27 2002 - 17:26:51 GMT-3


   
All of the 2002 presentations are up there, as well as the power sessions.

http://www.cisco.com/networkers/nw02/post/presentations.html
Or just the files here
http://www.cisco.com/networkers/nw02/presos/docs/

And the power sessions
http://www.cisco.com/networkers/nw02/presos/pws/docs/

-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com]On Behalf Of
Jake
Sent: Saturday, July 27, 2002 3:56 PM
To: Prakash H Somani; Anthony Pace
Cc: ccielab@groupstudy.com
Subject: Re: IPSEC and GRE

Everyone,

What Prakash is talking about can be found here:
<http://www.cisco.com/networkers/nw01/pres/index.html>

This is a fantastic repository of all the presentations at networkers 2001
in PDF format.
I don't think the slides from NW2002 have been published to the site yet.
So, if your
company (like mine) is unwilling to send you to these wonderful events, at
least you can
check out the great presentations.

Also, this one's for the 2000 networkers; although old, some of it is still
worth looking
at:

<http://www.cisco.com/networkers/nw00/pres/>

HTH,
Jake
9102

--- Prakash H Somani <pdsccie@rediffmail.com> wrote:
> Hi,
>
> I suggest you go to networkder 2001 and read a presentation given
> on IPSec implementation on large enterprises...ITs a good
> presentation.
>
> regards...Prakash
>
> On Thu, 25 Jul 2002 Anthony Pace wrote :
> >To encrypt a GRE tunnel is it best to apply the crypto map to the
> >GRE
> >tunnel interface or the real interface(s) the traffic will
> >ultimatly
> >traverse. If the answer is both, then do I set up the access-list
> >to
> >encrypt all IP or just GRE traffic.
> >
> >I would think that if you applied the map to the real interface,
> >and
> >the ACL matched GRE then it would work.
> >
> >I would think that if you appplied the map to the GRE, and the
> >ACL
> >matched all IP then it would also work.
> >
> >The examples I have seen put it on both. What is the difference
> >and
> >does it matter?
> >
> >Anthony Pace
> >--
> > Anthony Pace
> > anthonypace@fastmail.fm
> >
> >--
> >http://fastmail.fm - Email service worth paying for. Try it for
> >free.



This archive was generated by hypermail 2.1.4 : Sat Sep 07 2002 - 19:36:46 GMT-3