[c-nsp] GRE over IPSEC wtf?!

Phil Mayers p.mayers at imperial.ac.uk
Wed Oct 26 10:01:38 EDT 2011


On 26/10/11 14:58, Persio Pucci wrote:
> I'll try some of those later, for now I think they are doing something
> on the other side as phase 1 is not establishing anymore.
>
> I have read somewhere that GRE tunnels need exclusivity on their
> loopbacks (can't share it with other tunnels), does that really apply?

That is true on some platforms (e.g. hardware forwarding limitations on 
6500/sup720).

I don't believe it's true on the software routers. Certainly we use one 
loopback for many tunnels on a 28xx series router.


More information about the cisco-nsp mailing list