<div>
Functionally, it will work just fine. &nbsp; Granted there is an overhead, but there should be no issue running in this scenario. <br />
<br />
What device are you using to terminate the tunnel? 
</div>


Functionally, it will work just fine.   Granted there is an overhead, but there should be no issue running in this scenario.

What device are you using to terminate the tunnel?

<div>
Cisco ASR 1004.<br />
<br />
Operationally? If I terminate the mGRE tunnels on a different box, does that just add another box to break, or make operational sense to separate tunnels?<br />
<br />
Thanks for your input.<br />
<br />
SteveJ
</div>


Cisco ASR 1004.

Operationally? If I terminate the mGRE tunnels on a different box, does that just add another box to break, or make operational sense to separate tunnels?

Thanks for your input.

SteveJ

<div>
<div class="content wysiwyg-content">
I am looking at cisco's DMVPN running IPSec over GRE tunnels to allow multicast. I can't locate any pro / con discussion about terminating the IPSec and GRE tunnels on the same device or different devices. If I have the resource (CPU and bandwidth) to handle the load, are there operational or manangement considerations I'm missing?<br />
<br />
Thanks for your input.<br />
SteveJ
</div>
</div>


I am looking at cisco's DMVPN running IPSec over GRE tunnels to allow multicast. I can't locate any pro / con discussion about terminating the IPSec and GRE tunnels on the same device or different devices. If I have the resource (CPU and bandwidth) to handle the load, are there operational or manangement considerations I'm missing?

Thanks for your input.
SteveJ

IPSec and GRE - terminate on the same device or different devices?

Internet Protocol Security (IPsec) is a protocol suite for secure Internet Protocol (IP) communications by authenticating and encrypting each IP packet of a communication session. IPsec includes protocols for establishing mutual authentication between agents at the beginning of the session and negotiation of cryptographic keys to be used during the session. IPsec can be used in protecting data flows between a pair of hosts (host-to-host), between a pair of security gateways (network-to-network), or between a security gateway and a host (network-to-host). IPsec is an end-to-end security scheme operating in the Internet Layer of the Internet Protocol Suite.

Internet Protocol Security

A virtual private network (VPN) is a network that uses a public telecommunication infrastructure, such as the Internet, to provide remote offices or travelling users access to a central organizational network securely. VPNs encapsulate data transfers using secure cryptographic methods and other security mechanisms to ensure that only authorized users can access the network and that the data cannot be intercepted.

A router is a networking device that forwards data packets between computer networks. Routers perform the "traffic directing" functions on the Internet. The most familiar type of routers are home and small office cable or DSL routers that simply pass data, such as web pages, email, IM, and videos between computers and the Internet. More sophisticated routers, such as enterprise routers, connect large business or ISP networks up to the powerful core routers that forward data at high speed along the optical fiber lines of the Internet backbone. Though routers are typically dedicated hardware devices, use of software-based routers has grown increasingly common.