problem with gre over ipsec

[adsnow wang]

my english is poor,there is a problem with my VPN.

it is the same problem with gre over ipsec:https://supportforums.cisco.com/message/3358857#3358857.

in my side,there is a 2851:

when i apply the crypto map in the GRE tunnel interface this type of message apears.

  NOTE: crypto map is configured on tunnel interface.

        Currently only GDOI crypto map is supported on tunnel interface.

in other side, it is a 3662,there is no error.

in solution 1, must i setup these configures on both sides,(yes,i don't have permission of 3662)?

in solution 2,i got information there is no ipsec profiles command on 3662.

or whether there is a old version of ios to support the tunnel crypto with 2851?

if possible,please send me an email adsnow99123@163.com ; adsnow.wang@gmail.com.

many thanks,

adsnow

[andrew.prince]

You should terminate the vpn tunnel on a physical interface, but run the dynamic routing over the pt-pt gre interface.

Sent from Cisco Technical Support iPad App

[adsnow wang]

must i setup these configures on both sides(i don't have permission of 3662)?

[Richard Burts]

adsnow

There are parts of the configuration that must be set up on each side and must match what is configured on the other side. If you do not have permissions on the 3662 then you need to coordinate with someone who does have permissions on that device to get the changes made.

HTH

Rick

[adsnow wang]

many thanks.