how to turn on IPsec on a GRE tunnel on cisco

Hi i was talking to the CCIE and he told me that for the GRE tunnel , i need :

1. create the GRE tunnel on both routers ( on each router on each site)  . done
2. create crypto map with the appropriate access list . done
3. Apply the crypto map on both sides . done
4. turn the encryption on. What does he mean .  ?? How do i turn the crypto on ?
c_hocklandAsked:
Who is Participating?
 
Garry GlendownConsulting and Network/Security SpecialistCommented:
Here's an excerpt that works for me: (may not work on older IOS versions)

crypto isakmp key ***thekey*** address y.y.y.70
!
crypto ipsec transform-set mytransset esp-aes 256 esp-sha-hmac
 mode transport
!
crypto ipsec profile mycryptoprofile
 set transform-set mytransset
!
interface Tunnel1
 ip address 172.31.254.6 255.255.255.252
 keepalive 10 4
 tunnel source x.x.x.218
 tunnel destination y.y.y.70
 tunnel mode ipsec ipv4
 tunnel protection ipsec profile mycryptoprofile

Open in new window

0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.