""zino"" wrote in message news:[EMAIL PROTECTED] > Hi, > > I want know different Among the crypto access-list of gre and ip command
it's morte like IPSec over a GRE tunnel, and watch the MTU if you do this. Hard and long experience :- > ex)access-list 100 per gre 10.0.0.0 0.0.0.255 192.168.0.0 0.0.0.255 > access-list 100 per ip 10.0.0.0 0.0.0.255 192.168.0.0 0.0.0.255 I'm not sure I'm understanding you. GRE is a tunnel protocol between two endpoints. interface tunnel 1 tunnel source loopback 1 tunnel destination 100.1.1.2 ip address 200.1.1.1 255.255.255.252 then add your crypto commands to enable IPSec over this tunnel your IPSec command access-list might look something like access-list 101 permit ip 121.1.1.0 0.0.0.255 122.1.1.0 0.0.0.255 this would permit hosts with a source address on the 121.1.1.0/24 subnet sending traffic to hosts on the 122.1.1.0 subnet to be permitted across the IPSec interface. am I understanding you correctly? It's late and I'm getting sleepy. :O > > -- > Thanks for Regards > > MCSE,CSE,CCNA,CCDA,CSS1,CCNP > ASE,MasterASE,CCIE Security Candidate > TEL:02-2190-5536 > C P:011-9154-1607 > Narae System Co.,Ltd > System Technical Division > Technical 4Team Section Manager Message Posted at: http://www.groupstudy.com/form/read.php?f=7&i=64439&t=64435 -------------------------------------------------- FAQ, list archives, and subscription info: http://www.groupstudy.com/list/cisco.html Report misconduct and Nondisclosure violations to [EMAIL PROTECTED]
