I have two routers and the tunnel between them is up and working well. Router1 has GRE/IP as the protocol on its tunnel interface, and as for Router2 the tunnel interface is working with IPSEC/IP. Can someone throw a theoretical insight as to how this is possible. My limited knowledge of the subject tells me that both ends need to have the same protocols configured.
3
-
2Both ends of the tunnel must negotiate things like IPsec. You cannot do what you suggest. How does an end with GRE decode IPsec, or vice versa?– Ron Maupin ♦Commented Feb 13, 2019 at 19:09
-
1Your limited knowledge is correct. If I speak Basque and you speak Tagalog, we won't communicate very well.– Ron TrunkCommented Feb 13, 2019 at 19:09
-
Did any answer help you? If so, you should accept the answer so that the question doesn't keep popping up forever, looking for an answer. Alternatively, you can provide and accept your own answer.– Ron Maupin ♦Commented Dec 14, 2019 at 20:19
Add a comment
|
1 Answer
No. A tunnel requires both endpoints to be able to decapsulate the traffic from the other endpoint, and one endpoint configured with one type of encapsulation will not know how to do that for a different encapsulation.
You could have two separate tunnels with different encapsulations, or you could have one tunnel inside another tunnel, e.g. GRE inside IPsec.
answered Feb 13, 2019 at 20:05
