GRE and gre over ipsec Configuration

650) this. width = 650; "src =" http://www.bkjia.com/uploads/allimg/131227/04242L605-0.jpg "title =" GRE.jpg "alt =" 140403257.jpg"/>

GRE Configuration

R1Configuration Interface Loopback1 Ip address 192.168.3.1 255.255.255.0 Ip ospf network point-to-point Interface Loopback2 Ip address 192.168.4.1 255.255.255.0 Ip ospf network point-to-point Interface Tunnel 1 // create GRE Tunnel 1 Ip address 192.168.0.1 255.255.255.0 // Configure the ip address and the peer address in a subnet Tunnel source 202.100.1.1 // local egress address Tunnel destination 202.100.2.3 // public IP address of the Peer end Interface FastEthernet0/0 Ip address 202.100.1.1 255.255.255.0 Router ospf 110 Router-id 192.168.0.1 Log-adjacency-changes Network 192.168.0.1 0.0.0.0 area 0 Network 192.168.3.1 0.0.0.0 area 0 Network 192.168.4.1 0.0.0.0 area 0 Ip route 0.0.0.0 0.0.0.0 202.100.1.2

R3Configuration Interface Loopback1 Ip address 192.168.5.1 255.255.255.0 Ip ospf network point-to-point Interface Loopback2 Ip address 192.168.6.1 255.255.255.0 Ip ospf network point-to-point Interface Tunnel1 // create GRE Tunnel 1 Ip address 192.168.0.2 255.255.255.0 // Configure the ip address and the peer address in a subnet. Tunnel source 202.100.2.3 // local egress address Tunnel destination 202.100.1.1 // public IP address of the Peer end Interface FastEthernet0/0 Ip address 202.100.2.3 255.255.255.0 Router ospf 110 Router-id 192.168.0.2 Log-adjacency-changes Network 192.168.0.2 0.0.0.0 area 0 Network 192.168.5.1 0.0.0.0 area 0 Network 192.168.6.1 0.0.0.0 area 0 Ip route 0.0.0.0 0.0.0.0 202.100.2.2

Gre over ipsec Configuration

R1 Configuration Crypto isakmp policy 10 Encr 3des Authentication pre-share Group 2 Crypto isakmp key cisco address 202.100.2.3 Crypto ipsec transform-set gre esp-des esp-md5-hmac Mode transport Crypto ipsec profile gre-ipsec Set transform-set gre Interface Loopback1 Ip address 192.168.3.1 255.255.255.0 Ip ospf network point-to-point Interface Loopback2 Ip address 192.168.4.1 255.255.255.0 Ip ospf network point-to-point Interface Tunnel1 Ip address 192.168.0.1 255.255.255.0 Tunnel source 202.100.1.1 Tunnel destination 202.100.2.3 Tunnel protection ipsec profile gre-ipsec Interface FastEthernet0/0 Ip address 202.100.1.1 255.255.255.0 Router ospf 110 Router-id 192.168.0.1 Log-adjacency-changes Network 192.168.0.1 0.0.0.0 area 0 Network 192.168.3.1 0.0.0.0 area 0 Network 192.168.4.1 0.0.0.0 area 0 Ip route 0.0.0.0 0.0.0.0 202.100.1.2

R3 Configuration Crypto isakmp policy 10 Encr 3des Authentication pre-share Group 2 Crypto isakmp key cisco address 202.100.1.1 Crypto ipsec transform-set gre esp-des esp-md5-hmac Mode transport Crypto ipsec profile gre-ipsec Set transform-set gre Interface Loopback1 Ip address 192.168.5.1 255.255.255.0 Ip ospf network point-to-point Interface Loopback2 Ip address 192.168.6.1 255.255.255.0 Ip ospf network point-to-point Interface Tunnel1 Ip address 192.168.0.2 255.255.255.0 Tunnel source 202.100.2.3 Tunnel destination 202.100.1.1 Tunnel protection ipsec profile gre-ipsec Interface FastEthernet0/0 Ip address 202.100.2.3 255.255.255.0 Router ospf 110 Router-id 192.168.0.2 Log-adjacency-changes Network 192.168.0.2 0.0.0.0 area 0 Network 192.168.5.1 0.0.0.0 area 0 Network 192.168.6.1 0.0.0.0 area 0 Ip route 0.0.0.0 0.0.0.0 202.100.2.2

Show crypto engine connection active // view vpn Information