IPSEC GRE

[bapatsubodh]

Hi,

Configured the IPSEC that will encrypt the GRE traffic and it forms OSPF neighbor relationship.

In the configuration crypto map was applied to the physical serial interface facing the outside world.

( crypto ACL match the GRE portocol packets )

IS there any way with which we can configure the crypto map on the tunnel interface?

If we need to apply crypto map to tunnel interface, then what changes do we need in the crypto access-list and peering host IP?

Please see the working GRE- IPSEC configurations attached.

Please share the experience.

Thanks inadvance

Cheers.

Subodh

[Giuseppe Larosa · Accepted solution]

Hello Subodh,

the current way to configure GRE over IPSec is the use of crypto map over the WAN physical interface like you have done.

I may be wrong, but configuration of crypto map over the GRE Tunnel interface was used in old IOS in some previous implementation.

You should be fine with your configuration and the OSPF adjacency over GRE over IPSEC provides a good confirmation that everything is working well

Hope to help

Giuseppe

[bapatsubodh]

Thanks. Giuseppe.