Solved

cisco question on tunnel interface

Posted on 2011-09-27
4
274 Views
Last Modified: 2012-05-12
I am looking at the config of a 2811 router. There is no VPN
but i see the following

interface Tunnel528
 description --- Site A & Site B VPN ---
 ip address 10.x.y.z 255.255.255.252
 ip flow ingress
 no ip route-cache cef
 no ip route-cache
 delay 250000
 tunnel source FastEthernet0/1
 tunnel destination 208.x.y.z
 tunnel key 528
 tunnel checksum

Question 1. Is this a VPN tunnel ?
question2. Do i need to do any config on Site B router ?

many thanks
0
Comment
Question by:c_hockland
4 Comments
 
LVL 26

Accepted Solution

by:
Soulja earned 167 total points
ID: 36710909
A tunnel is just a virtual interface, so yes it a virtual private network if it's connecting to site b, but is it not encrypted or secure unless you encapsulate it within IPSEC.  Site B should have a similar config as Site A.
0
 
LVL 8

Assisted Solution

by:akalbfell
akalbfell earned 167 total points
ID: 36713295
You would need an access list to specify the "intersting traffic" or the tunnel wont come up. You have what looks like the start of a VPN Tunnel but still need more to get it working properly. And of course as Soulja said you need to configure Site B
0
 
LVL 79

Assisted Solution

by:lrmoore
lrmoore earned 166 total points
ID: 36713972
1. Sort of. It is a GRE tunnel, but not a traditional VPN tunnel. VPN implies encryption and GRE is not an encryption protocol. You can setup ipsec encryption of the tunnel, but your configuration does not include it.

2. Yes, of course, the remote router has to have a very similar configuration.
0
 

Author Comment

by:c_hockland
ID: 36717512
thanks all. Yes this is a GRE tunnel from what the CCIE person told me and there is part of the config the is missing here that includes ipsec.

So  i would assume that since this is a GRE "tunnel " i need to be using the public interface of the routers , right ?
Also , i dont need to be using a point to poing link. i can be creating the tunnel using the internet , right ?

Any imput on these two questions would be highly appreciated .

0

Featured Post

PRTG Network Monitor: Intuitive Network Monitoring

Network Monitoring is essential to ensure that computer systems and network devices are running. Use PRTG to monitor LANs, servers, websites, applications and devices, bandwidth, virtual environments, remote systems, IoT, and many more. PRTG is easy to set up & use.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
How VPC help preventing STP Loops 4 100
Cisco Switch Port Security 2 46
The purpose of using BGP 33 101
looking for a program or router to monitor internet connection 4 51
We've been using the Cisco/Linksys RV042 for years as: - an internet Gateway - a site-to-site VPN device - a leased line site-to-site subnet-to-subnet interface (And, here I'm assuming that any RV0xx behaves the same way as an RV042.  So that's …
Tired of waiting for your show or movie to load?  Are buffering issues a constant problem with your internet connection?  Check this article out to see if these simple adjustments are the solution for you.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…

809 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question