[c-nsp] Encrypting GRE on IOS-XR ...

[Bryan Holloway]

Use-case:

Network with several inter-colo WAN links and decent redundancy, but hey 
-- things break. Need to keep certain management (think VRF) things 
working across severed portions of the network after enough backhoes 
have had their way with us.

Running mostly IOS-XR 6.5.3 everywhere.

I'd like to build a couple of tunnels and run high-cost OSPF across them 
for fail-over situations. Since OSPF generally doesn't work over IPsec, 
I've been looking at IPsec-encrypted GRE tunnels, but I haven't found 
any good examples (at least not using IOS-XR.) Plenty of ones for IOS, 
but ...

Curious if anyone in the community has made this work ...

Or should I be looking in a different direction?

Thank you in advance!

		- bryan