R2511-HP MSR Router Series Layer 3 - IP Services Configuration Guide(V5)

247
Figure 99 Network diagram
Operating with IPsec
As shown in Figure 100, GRE can be encapsulated into IPsec to improve transmission security for routing
protocol packets, voice data, and video data.
Figure 100 Network diagram
For more information about IPsec, see Security Configuration Guide.
Protocols and standards
• RFC 1701, Generic Routing Encapsulation (GRE)
• RFC 1702, Generic Routing Encapsulation over IPv4 networks
• RFC 2784, Generic Routing Encapsulation (GRE)
Configuring a GRE over IPv4 tunnel
Configuration guidelines
• The source address and destination address of a tunnel uniquely identify a path. You must configure
the tunnel source address and destination address at both ends of a tunnel and the tunnel source or
destination address at one end must be the tunnel destination or source address at the other end.
• Tunnel interfaces using the same encapsulation protocol must have different source addresses and
destination addresses.
• If you configure a source interface for a tunnel interface, the tunnel interface takes the primary IP
address of the source interface as its source address.
• You can enable or disable the checksum function at both ends of a tunnel.