Solved

GRE over IPSec for DR

Posted on 2006-10-20
3
440 Views
Last Modified: 2008-01-09
Scenario is as follows:

1 PIX that will be utilizing an IPSEC tunnel to an ASA at another site.

1 router behind the PIX needs to tunnel GRE to a router behind the ASA.  (for EIGRP routing updates)

This will be utilized in a DR scenario where our core connection goes away.

Any assistance in pointing me in the right direction is appreciated.  I know there are some issues routing GRE over IPSEC and I'd like to avoid them if possible.
0
Comment
Question by:NetAdmin5555
3 Comments
 
LVL 4

Accepted Solution

by:
periferral earned 500 total points
ID: 17883533
I dont see why there would be a problem. Once an IPSec tunnel is established between the PIX and ASA, all traffic should just go through the tunnel. The router to router GRE should just work. If not,

try fixup pptp on the ASA device and you should be okay.
fixup pptp 1723
or
policy-map global_policy
 class inspection_default
  inspect pptp

0
 
LVL 1

Expert Comment

by:Computer101
ID: 20286670
Forced accept.

Computer101
EE Admin
0

Featured Post

Find Ransomware Secrets With All-Source Analysis

Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

Join & Write a Comment

If your business is like most, chances are you still need to maintain a fax infrastructure for your staff. It’s hard to believe that a communication technology that was thriving in the mid-80s could still be an essential part of your team’s modern I…
If you're not part of the solution, you're part of the problem.   Tips on how to secure IoT devices, even the dumbest ones, so they can't be used as part of a DDoS botnet.  Use PRTG Network Monitor as one of the building blocks, to detect unusual…
Get a first impression of how PRTG looks and learn how it works.   This video is a short introduction to PRTG, as an initial overview or as a quick start for new PRTG users.
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…

746 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now