Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
ISCW68 Answer Was a Little Ambiguous
#1
I looked at the following Field Notice from Cisco and it Clarifies alot.  If you have worked with it.  SDM will configure the Crypto Map on the Physical Interface and the Tunnel Interface.  However many manual configurations Only configure on the Physical Interface.

Reasons
    Physical Interface:  encrypts the entire GRE encapsulated Packet
    Tunnel Interface: Encrypts data then encapsulates with GRE and sends it through the Tunnel

Seems that Prior to 12.2(13)T you must include the Crypto Map on both interfaces.  SDM may still be including this for backwards compatibility.  But to say the least it confused me when I saw it.  Hope this helps anyone else that may have been caught off guard by the question.


http://www.cisco.com/en/US/ts/fn/620/fn62394.html
Reply


Forum Jump:


Users browsing this thread: 1 Guest(s)