Re: IPSec and GRE

From: Sam Munzani (sam@xxxxxxxxxxx)
Date: Fri Jun 15 2001 - 11:59:03 GMT-3

• Next message: Sam Munzani: "Re: NAT on a stick - possible?"
• Previous message: Jim Graves: "Re: What is the fuction of the established keyword in Access-list?"
• Maybe in reply to: Andrew G. Mason: "IPSec and GRE"
• Next in thread: Brant I. Stevens: "Re: IPSec and GRE"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

   
GRE will let you encapsulate IPX or APPLE protocols through it. IPSEC will
do ip only. When you want to tunnel IPX across internet, create GRE tunnel
first and then use IPSEC to secure it if security is a convern. Otherwise
GRE will do the job unencrypted.

Regards,

Sam Munzani
CCIE # 6479, CCNP, CCDP, CCSE, MCSE, CNE(5, 4, 3), SCO Master ACE, HP
Openview Consultant
Certified AIX Administrator, Certified Warp Server Engineer

> Hi,
>
> I see quite a few posts and recommendations to use GRE tunnels with IPSec.
> This confuses me because IPSec performs tunnelling in its default
> configuration anyway so I cannot see any reason for tunnelling through a
> tunnel?
>
> Can anybody give a good reason to use a GRE tunnel instead of the default
> IPSec tunnel mode configuration?
>
> Cheers
>
>
> Andrew G. Mason
> CCIE #7144
> **Please read:http://www.groupstudy.com/list/posting.html
**Please read:http://www.groupstudy.com/list/posting.html

• Next message: Sam Munzani: "Re: NAT on a stick - possible?"
• Previous message: Jim Graves: "Re: What is the fuction of the established keyword in Access-list?"
• Maybe in reply to: Andrew G. Mason: "IPSec and GRE"
• Next in thread: Brant I. Stevens: "Re: IPSec and GRE"
• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]

This archive was generated by hypermail 2.1.4 : Thu Jun 13 2002 - 10:31:24 GMT-3