Help us improve your experience.

Let us know what you think.

Do you have time for a two-minute survey?

Navigation
Guide That Contains This Content
[+] Expand All
[-] Collapse All

    Enabling IPsec Support for GRE and DVMRP Tunnels

    You can use the ipsec-transport keyword with the interface tunnel command to create GRE and DVMRP tunnels that are protected with IPsec in transport mode. You can establish the tunnels on a virtual router other than the current virtual router.

    Note: After you create a clear GRE or DVMRP tunnel, you cannot convert it to an IPsec-secured tunnel, or vice versa. You must delete the tunnel configuration, then reconfigure the tunnel as the new type.

    To create a GRE tunnel that is protected with IPsec:

    • Issue the interface tunnel command with the ipsec-transport keyword in Global Configuration mode.
    host1(config)#interface tunnel gre:denver-tunnel-5 transport-virtual-router denver ipsec-transport host1(config-if)#

    Use the no version to remove the tunnel.

    Published: 2014-08-12