RE: Applying crypto map...

From: joedeleonardo@cox.net
Date: Wed Aug 18 2004 - 11:24:34 GMT-3


Hi,

Yes you can apply it to a tunnel. In fact if you wanted to do IPSec over GRE you apply it to the tunnel only. If you wanted to do GRE over IPSec you'd apply it to the tunnel, the loopback and the physical.

You apply it where ever you want to send or receive encrypted traffic in/out of an interface. That's why you'd put it on a loopback... if you did something like. Using the loopback for VPN redundancy.

I hope I'm making sense. It's still early yet. :)

Take care,

Joe

-----Original Message-----
From: nobody@groupstudy.com [mailto:nobody@groupstudy.com] On Behalf Of Todd Carswell
Sent: Wednesday, August 18, 2004 7:02 AM
To: ccielab@groupstudy.com
Subject: Applying crypto map...

For IPSec, is it possible to apply a crypto map to a Tunnel
interface? I've come to the conclusion that you can only apply them to
physical interfaces.

Can someone confirm? Thx

TC



This archive was generated by hypermail 2.1.4 : Fri Sep 03 2004 - 07:02:45 GMT-3