3

I am trying to run IPSec GRE over a MetroE circuit:

ROUTER---------metroe----------ROUTER

The routers are set up to route all traffic over the ipsec tunnel; however, when I check the routers I see traffic on both the tunnel and the physical interface. Why is that?

I want the traffic to only go through the tunnel interface.

  • Did any answer help you? if so, you should accept the answer so that the question doesn't keep popping up forever, looking for an answer. Alternatively, you could provide and accept your own answer. – Ron Maupin Aug 8 '17 at 16:00
7

I see traffic on both the tunnel and the physical interface. Why is that?

The tunnel is virtual between two routers, but it is still leaving a physical interface; that means the counters on the physical interface will increase. The IPSec/GRE tunnel has to go somewhere.

| improve this answer | |
  • Why do I see the RX|TX counters increasing on the pyhsical interface when it supposed to go via the tunnel? – user3916 Jan 25 '14 at 11:46
  • @user3916 Because the tunnel goes over the physical interface. Note: the traffic going into the interfaces are going to be different (i.e. the physical interface will be encrypted data). – Ryan Foley Jan 25 '14 at 11:52

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.