Enabling IPSec Support for GRE and DVMRP Tunnels

To create GRE/IPSec and DVMRP/IPSec tunnels, use the ipsec-transport keyword with the interface tunnel command.

interface tunnel dvmrp

interface tunnel gre

• Use with the ipsec-transport keyword to create a GRE or DVMRP tunnel that is protected with IPSec in transport mode.

  Note: After you create a clear GRE or DVMRP tunnel, you cannot convert it to an IPSec-secured tunnel, or vice versa. You must delete the tunnel configuration, then reconfigure the tunnel as the new type.

• You can establish the tunnel on a virtual router other than the current virtual router.
• Example

  host1(config)#interface tunnel gre:denver-tunnel-5 transport-virtual-router denver ipsec-transport

  host1(config-if)#

• Use the no version to remove the tunnel.
• See interface tunnel.

Copyright © 2008, Juniper Networks, Inc. All rights reserved. Trademark Notice.