R3303-HP HSR6800 Routers Layer 3 - IP Services Configuration Guide

263
Figure 112 Network diagram
Operating with IPsec
As shown in Figure 113 , GRE can be encapsulated into IPsec to improve transmission security for routing
protocol packets, voice data, and video data.
Figure 113 Network diagram
For more information about IPsec, see Security Configuration Guide.
Protocols and standards
• RFC 1701, Generic Routing Encapsulation (GRE)
• RFC 1702, Generic Routing Encapsulation over IPv4 networks
• RFC 2784, Generic Routing Encapsulation (GRE)
Configuring a GRE over IPv4 tunnel
Configuration guidelines
Follow these restrictions and guidelines when you configure a GRE over IPv4 tunnel:
• The source address and destination address of a tunnel uniquely identify a path. You must configure
the tunnel source address and destination address at both ends of a tunnel and the tunnel source or
destination address at one end must be the tunnel destination or source address at the other end.
• Tunnel interfaces using the same encapsulation protocol must have different source addresses and
destination addresses.
• If you configure a source interface for a tunnel interface, the tunnel interface takes the primary IP
address of the source interface as its source address.