IPSec over GRE

[Rockyy]

Hi,

I'm using ASA 5510 firewall on both sites and routing is handled by layer 3 switch. I would like to use EIGRP protocol on both core switches. Both sites are currently on IPSec configured on the ASA Firewall.

Please advise how can I do that?

ASA --> Switch  SITE A           

ASA --> Switch SITE B

[Flavio Miranda]

Hello,

  Wondering about you setup. Usually, IPSEC is a point-to-point connection the same way is GRE. So, you could setup this from your network device where both could start a GRE tunnel and IPSEC tunnel over GRE.

 The idea of ASA -Network Device - ASA dont make sense in my opinion. Cause, the ASA itself does not speak GRE, so, at the end of the say, what you are going to have is a IPSEC tunnel between ASAs, considering they have connectivity.

 If you have GRE tunnel between Network Devices would be a different story. As soon as they allow ASA firewall to see each other and negociate IPSEC tunnel, dont matter.