From: Richard Dumoulin (Richard.Dumoulin@vanco.fr)
Date: Thu Nov 03 2005 - 13:46:57 GMT-3
With the new IOSs you do not need the crypto under the tunnel interface
anymore
-- Richard
-----Message d'origine-----
De : nobody@groupstudy.com [mailto:nobody@groupstudy.com] De la part de
Geert Nijs
Envoyi : jeudi 3 novembre 2005 16:43
@ : ccielab@groupstudy.com
Objet : GRE encryption with IP SEC
Hi group,
When encrypting a GRE Tunnel with IP SEC, the crypto map must be applied to
the Tunnel interface AND to the physical interface.
I understand the physical interface, but why does it need to be specified on
the tunnel interface ? Is this really necessary and what is the effect ?
I am trying to setup sort of a special configuration:
Router R1 is connected to R2 and R2 is connected to R3
I have a GRE tunnel running from R1 to R3 using loopback addresses.
Between R1 and R2, this tunnel needs to be encrypted, not from R2 to R3
Is this possible ?
regards,
Geert
############################################################################
#########
Simac N.V. trades under the commercial name Simac ICT Belgium.
This e-mail and any attached files are confidential and may be legally
privileged.
If you are not the addressee, any disclosure, reproduction, copying,
distribution,
or other dissemination or use of this communication is strictly prohibited. If
you have received this transmission in error please notify Simac
immediately
and then delete this e-mail.
Simac has taken all reasonable precautions to avoid virusses in this email.
Simac does not accept liability for damage by virusses, for the correct and
complete
transmission of the information, nor for any delay or interruption of the
transmission,
nor for damages arising from the use of or reliance on the information.
All e-mail messages addressed to, received or sent by Simac or Simac
employees
are deemed to be professional in nature. Accordingly, the sender or
recipient of
these messages agrees that they may be read by other Simac employees than
the official
recipient or sender in order to ensure the continuity of work-related
activities
and allow supervision thereof.
############################################################################
#########
This archive was generated by hypermail 2.1.4 : Thu Dec 01 2005 - 09:12:05 GMT-3