GRE-IPSEC-Multicast

[Shibu1978]

Hi

I am planning to configure Multicast over IPsec site to site VPN with GRE tunneling.  attached the is the connectivity diagram proposed for this. Is it a better plan to have GRE along with IPSEC ? or IPSEC VPN alone is best?

Since medium through internet can i ensure a better picture quality on the receiver side by putting some QOS. Could you help me to put some QOS?

Multicast traffic would be with Spare mode with SSM .

Follwing is the diagram

Thanks

[Harish Balakrishnan]

Hello Shibu,

Native IPSEC can not transport  multicast packets, hence you have to go for tunneling mechanism over it. If you have 2 sites over internet and you want to run multicast  over it, the ideal solution is to run GRE over IPSec.  We can have some QOS mechanism to get a better quality for the traffic . however that will limited since it is over internet

http://www.cisco.com/application/pdf/en/us/guest/netsol/ns171/c649/ccmigration_09186a008074f26a.pdf

this guide has some good QOS configuration for the proposed solution

hope this helps

Harish.

Please rate all helpful posts!