GRE over IPSec

[UCrypto]

Dear All,

I would like to know about some issue in GRE over IPsec.I configured one point to point GRE over IPsec tunnel.I would like to know if i want to configure other GRE tunnel to HUB without using IPsec,can i use this gre tunnel without encryption ? IPSec profile will drop new gre traffic (no used encryption) ? 

[cofee]

Hello,

As long as you create another gre tunnel and not use the existing tunnel with IPsec then there should no issue.

[UCrypto]

Other Gre tunnel is just testing only.Someone said that HUB router's outside interface only accepts encrypted traffic and IPSec profile applied in current router external interface so all the traffic coming in must match current IPSec profile.if i want to use GRE only we need to use new interface in HUB router.is it right or not?

[Georg Pauwen · Accepted solution]

Hello,

just for clarification: the GRE tunnel config must match on both sides. You need to create the tunnel endpoint at the hub router as well with NO encryption for this to work...

[UCrypto]

If IPSec profile applied in current HUB router external interface . it will accept encrypted traffic only  ?

[Georg Pauwen]

Hello,

what platform is this on ? Post the output of 'show version'.

interface GigabitEthernet0/0/1
ip address 10.10.10.1 255.255.255.0
ipsec apply policy test

[UCrypto · Accepted solution]

I am using HP router  in hub and cisco router for spoke