GRE over IPSec for DR

Scenario is as follows:

1 PIX that will be utilizing an IPSEC tunnel to an ASA at another site.

1 router behind the PIX needs to tunnel GRE to a router behind the ASA.  (for EIGRP routing updates)

This will be utilized in a DR scenario where our core connection goes away.

Any assistance in pointing me in the right direction is appreciated.  I know there are some issues routing GRE over IPSEC and I'd like to avoid them if possible.
Who is Participating?
periferralConnect With a Mentor Commented:
I dont see why there would be a problem. Once an IPSec tunnel is established between the PIX and ASA, all traffic should just go through the tunnel. The router to router GRE should just work. If not,

try fixup pptp on the ASA device and you should be okay.
fixup pptp 1723
policy-map global_policy
 class inspection_default
  inspect pptp

Forced accept.

EE Admin
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.