IPsec site to site VPN and GRE Tunnel

[kamrannaseem1]

Hello,

Would like to know if its possible to set up a a VPN between Cisco IOS as policy based and the remote end as route based i.e using tunnel interface ? remote end is using AWS.

any help will be much appreciated.

Thanks.

[shaps]

I dont think this is possible as the negotiation of the vpn tunnel will not match so therefore wont complete, although I havent stood up a VPN within AWS so it may behave differently to what I have seen with standard hardware FWs

[rasmus.elmholt]

Hi

In route based mode you always encapsulate the traffic in GRE/IPv4 and policy mode does not.

So you can't have one end of the VPN use route-based and the other use policy-based

Br