Why i use Access-list GRE Host?

[Mizanul Islam]

Dear,

Why i use access-list GRE host for (Hub to Spoke) Ipsec VPN. Can i use Extended access-list. If i use Extended access-list any problem.

access-list 101 permit gre host 150.0.0.1 host 150.0.0.2

Regards

Rasel

[Jennifer Halim]

Not a problem at all, you should be using extended access-list for GRE host.

The source should be the tunnel source address and the destination address in the ACl should be the tunnel destination address.