IOS XE ( ISR4331 ) CTCP - IPSec over TCP

[farookkalpana]

Hello,

I am trying to configure IPSec over TCP ( CTCP ) on IOS XE ( ISR4331 router ) , but I can not find the command.

I used to do it on IOS ( 800, 1900 routers ) with following command.

crypto ctcp port 400 

 Can anyone help.

[Rob Ingram]

Hi,

Looks likes CTCP was used with Easy VPN, this has been retired and no longer supported. I suggest using FlexVPN, although I am not aware of a replacement for the CTCP feature.

HTH

[NetEng0424]

EZVPN has been retired and cTCP is now a legacy encapsulation. I would suggest using IPSec over GRE if you are concerned about the IPSec packets being filtered.