GRE with IPsec [7:71959]

2003-07-06 Thread Michael Jia
Hi, Anyone has good reference doc about GRE with Ipsec . I am a little confused about 2 flavors of crypto ACL used: A) permit ip B) permit gre any any It seems option A is encry first then GRE encap, while option B is encap first then encrypt. Is there a good ref about these setups? Thanks

Re: GRE with IPsec [7:71959]

2003-07-06 Thread annlee
Try this http://www.cisco.com/en/US/tech/tk583/tk372/tech_configuration_examples_list.html Lots of examples here. Annlee ""Michael Jia"" wrote in message news:[EMAIL PROTECTED] > Hi, > > Anyone has good reference doc about GRE with Ipsec . > > I am a little confused about 2 flavors of crypto AC

RE: GRE with IPsec [7:71959]

2003-07-07 Thread Ben W
First of all, these should be two separate ACLs. A) is what you would reference in your crypto map. Anything conforming to that ACL is encrypted, so you would include all traffic that you would like to be encrypted on that acl. i.e all IP traffic from the source network to the destination networ