ipsec gre tunnel through ASA

[suthomas1]

Hi,

the setup is as below;

WAN Link  --> Router --> LAN

Now, we are installing a ASA to sit between the WAN link & Router as,

WAN Link --> ASA --> Router --> LAN

The router is already running an ipsec gre tunnel. Now, we need to let the tunnel pass through the ASA, but the endpoint for gre ipsec tunnel should remain the Router itself.

How do we do this.

Appreciate all inputs!

[James Leinweber · Accepted solution]

No problem, just make sure the access lists on the outside and the inside interfaces of the ASA permit protocol ESP traffic with the router.

-- Jim Leinweber, WI State Lab of Hygiene