By default, the tunnel mode is "gre ip". Tunnel interface can be used for any tunneling. You can put IP into IP, IP in GRE, IP into IPSec.
If you configure "tunnel mode ipsec ipv4", then it becomes an IPSec tunnel - SVTIs. No GRE is involved. If GREoIPSec is required "tunnel mode ipsec ipv4" shouldn't be configured. Just leave as it is which is equivalent to "tunnel mode gre ip". You won't see it in the running config as it is the default. "sh int t0" will tell you the type of tunnel. With regards Kings With regards. Kings On Wed, Mar 17, 2010 at 5:08 PM, Jimmy Larsson <[email protected]> wrote: > Hi > > I´ve read the url but still doesn´t really get it. The configuration looks > exactly like mine except for the addition of "tunnel mode ipsec ipv4". > > As far as I can figure the "tunnel mode ipsec ipv4" changes the tunnel from > running gre into using plain ipsec. Right? I dont have access to my lab at > the moment so I cant verify, but without "tunnel mode ipsec ipv4" the > traffic is GRE with a ipsec-content. When adding "tunnel mode ipsec ipv4" I > change the tunnel into running native ipsec, which should mean that a > sniffer should display ESP transit-traffic. > > Or am I wrong? > > If I am right, what happened to the limitation of ipsec when it comes to > multicast-traffic? > > > Br Jimmy > > > -- > ------- > Jimmy Larsson > Ryavagen 173 > s-26030 Vallakra > Sweden > http://blogg.kvistofta.nu > ------- > > _______________________________________________ > For more information regarding industry leading CCIE Lab training, please > visit www.ipexpert.com > >
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com
