10.4. GRE over IPsec

GRE over IPsec allows you to combine the advantages of GRE (multicast and broadcast support) and IPsec (transmitting traffic in encrypted form). A GRE over IPsec connection encapsulates the traffic in GRE packets and then transmits them over an encrypted link (IPsec encapsulation).

To configure GRE over IPSec, follow these steps:

Task

Description

Step 1. Configure a site‑to-site VPN connection.

For more details on configuring a site-to-site VPN connection, see the section Site-to-Site VPN connections.

Step 2. Configure a GRE tunnel.

For more details on configuring a GRE tunnel interface, see the section Tunnel Interface.

Important! When configuring a GRE tunnel interface, make sure to specify the addresses of the VPN interfaces as the source (local) and destination (remote) IP addresses.