3

I am trying to run IPSec GRE over a MetroE circuit:

ROUTER---------metroe----------ROUTER

The routers are set up to route all traffic over the ipsec tunnel; however, when I check the routers I see traffic on both the tunnel and the physical interface. Why is that?

I want the traffic to only go through the tunnel interface.

Improve this question
1
  • Did any answer help you? if so, you should accept the answer so that the question doesn't keep popping up forever, looking for an answer. Alternatively, you could provide and accept your own answer.
    – Ron Maupin ♦
    Commented Aug 8, 2017 at 16:00

1 Answer 1

Reset to default
7

I see traffic on both the tunnel and the physical interface. Why is that?

The tunnel is virtual between two routers, but it is still leaving a physical interface; that means the counters on the physical interface will increase. The IPSec/GRE tunnel has to go somewhere.

Improve this answer
2
  • Why do I see the RX|TX counters increasing on the pyhsical interface when it supposed to go via the tunnel?
    – user3916
    Commented Jan 25, 2014 at 11:46
  • @user3916 Because the tunnel goes over the physical interface. Note: the traffic going into the interfaces are going to be different (i.e. the physical interface will be encrypted data).
    – Ryan Foley
    Commented Jan 25, 2014 at 11:52

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.