Solved

GRE over IPSec for DR

Posted on 2006-10-20
3
457 Views
Last Modified: 2008-01-09
Scenario is as follows:

1 PIX that will be utilizing an IPSEC tunnel to an ASA at another site.

1 router behind the PIX needs to tunnel GRE to a router behind the ASA.  (for EIGRP routing updates)

This will be utilized in a DR scenario where our core connection goes away.

Any assistance in pointing me in the right direction is appreciated.  I know there are some issues routing GRE over IPSEC and I'd like to avoid them if possible.
0
Comment
Question by:NetAdmin5555
3 Comments
 
LVL 4

Accepted Solution

by:
periferral earned 500 total points
ID: 17883533
I dont see why there would be a problem. Once an IPSec tunnel is established between the PIX and ASA, all traffic should just go through the tunnel. The router to router GRE should just work. If not,

try fixup pptp on the ASA device and you should be okay.
fixup pptp 1723
or
policy-map global_policy
 class inspection_default
  inspect pptp

0
 
LVL 1

Expert Comment

by:Computer101
ID: 20286670
Forced accept.

Computer101
EE Admin
0

Featured Post

Free learning courses: Active Directory Deep Dive

Get a firm grasp on your IT environment when you learn Active Directory best practices with Veeam! Watch all, or choose any amount, of this three-part webinar series to improve your skills. From the basics to virtualization and backup, we got you covered.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

This is an article about my experiences with remote access to my clients (so that I may serve them) and eventually to my home office system via Radmin Remote Control. I have been using remote access for over 10 years and have been improving my metho…
This article will inform Clients about common and important expectations from the freelancers (Experts) who are looking at your Gig.
Viewers will learn how to connect to a wireless network using the network security key. They will also learn how to access the IP address and DNS server for connections that must be done manually. After setting up a router, find the network security…
This video gives you a great overview about bandwidth monitoring with SNMP and WMI with our network monitoring solution PRTG Network Monitor (https://www.paessler.com/prtg). If you're looking for how to monitor bandwidth using netflow or packet s…

749 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question