GRE over IPSec with easy vpn configuration..

[sqambera]

Hi,

My routers at two different sites are connected through GRE tunnels. I want to configure IPSec over it, but throug easy vpn server and client setup. Is it possible. Apparently the most reasonable configuration for the mentioned scenario is site-to-site vpn, but I want to configure it through easy vpn. I would also appreciate if some one can refer to any configuration example of such kind of setup. I tried this by defining the GRE tunnel interfaces of routers as vpn end points but its not working. Thanks.

[5220]

Hi,

Check the following links:

http://cisco.com/en/US/products/ps6635/products_white_paper09186a0080189153.shtml

In addition, you can check the following resources: http://cisco.com/en/US/products/ps6635/prod_white_papers_list.html

Please rate if this helped.

Regards,

Daniel

[wardperry]

Hi,

I had a similar senario. Dynamic remote clients, needing gre tunnels (remote ip phones for people working from home isp).

If you follow the guide for DMVPN with mGRE interface, it will allow you to use private IP's on your GRE tunnel, which forms after the dynamic vpn is built between the 2 routers. One caveat I've come across is that certain wireless images don't allow for nhrp (like the 871w image).

http://www.cisco.com/en/US/products/ps6635/products_white_paper0900aecd80267995.shtml

I attached a cleaned working config w/ QoS, nat, Inbound ACL's (permits and deny foreign source IP's from smtp relay), etc. good luck!

thanks,

Ward ccsp, mcse+m x2

wardperry@hotmail.com