topic Re: Can your run IPSEC on multiple GRE tunnels in a 2811 router? in VPN

Can your run IPSEC on multiple GRE tunnels in a 2811 router?

david-schroeder_2 — Fri, 21 Feb 2020 23:49:54 GMT

I have a 2811 router with multiple tunnels defined to other 2811's. I want to encrypt the traffic in each tunnel using ipsec. Since the crypto map only has one active peer and the map is applied to the physical Ethernet interface in my 2811 I have not been able to encrypt traffic on more than one tunnel. Basically my hub router has the multiple tunnels but I've only been able to successfully encrypt one tunnel at a time on that router. Any suggestions would be appreciated.

Thanks,

Dave

Re: Can your run IPSEC on multiple GRE tunnels in a 2811 router?

a.alekseev — Wed, 16 Jul 2008 21:08:57 GMT

use tunnel protection....

crypto isakmp policy 1

encr 3des

authentication pre-share

group 2

crypto isakmp key Cisco12345 address 10.0.149.217

crypto IPsec transform-set T1 esp-3des esp-sha-hmac

crypto IPsec profile P1

set transform-set T1

interface Tunnel0

ip address 10.0.51.203 255.255.255.0

ip ospf mtu-ignore

load-interval 30

tunnel source 10.0.149.203

tunnel destination 10.0.149.217

tunnel protection IPsec profile P1

interface Ethernet3/0

ip address 10.0.149.203 255.255.255.0

duplex full

Re: Can your run IPSEC on multiple GRE tunnels in a 2811 router?

david-schroeder_2 — Thu, 17 Jul 2008 13:43:26 GMT

Thanks for the information. It worked like a charm.

Dave