[j-nsp] Encrypt a GRE tunnels between CSCO and JNPR M7i

[Doug Marschke]

I also have an example in here but you might not be able to wait that
long:
http://www.amazon.com/JUNOS-Enterprise-Routing-Practical-Certification/d
p/0596514425/ref=pd_bbs_sr_1?ie=UTF8&s=books&qid=1202320197&sr=8-1

In general, steps are:

1) Create GRE interface
2) Map Traffic to GRE tunnel
3) Create IPSec Tunnel (may need to create custom proposals)
4) Create Service Filters to Map GRE packets to the IPsec tunnel
5) Optional: Create service filters if any SFW are applied to bypass
traffic



Doug Marschke
Principal Technologist
Strategic Networks Training
JNCIE-ER #3, JNCIE-M/T #41, JNCIS-FW, JNAT
www.ietraining.net
(415)902-5702


-----Original Message-----
From: juniper-nsp-bounces at puck.nether.net
[mailto:juniper-nsp-bounces at puck.nether.net] On Behalf Of Jonathan
Looney
Sent: Wednesday, February 06, 2008 6:45 AM
To: Massimiliano Galizia
Cc: juniper-nsp at puck.nether.net
Subject: Re: [j-nsp] Encrypt a GRE tunnels between CSCO and JNPR M7i

Juniper has an example of this in the "Advanced Juniper Networks
Routing in the Enterprise" course.  This is an instructor-led class,
which I would recommend.  However, if you cannot attend the class, you
can download the class materials for free as part of the Fast Track
program.  There is a link to this program on Juniper's "Education"
webpage.

-Jon

On Feb 6, 2008 6:29 AM, Massimiliano Galizia
<massimiliano.galizia at gmail.com> wrote:
> Hello all,
> I'm been requested to bring up a test plant with two CSCOs and two M7i
> in this fashion:
>
> ______                                              _____
> PCs     |-----|CSCO|--|---|JNPR|-----|PCs
>                                    |
> ______                       |                       _____
> PCs     |-----|CSCO|--|---|JNPR|-----|PCs
>
> My customer want to encrypt with IPSEC the GRE tunnels between the
> boxes. I don't find anything related in KB or doc sites.
> Any suggestion?
> Many thanks in advance
>
> Regards
>
> Max
>
> _______________________________________________
> juniper-nsp mailing list juniper-nsp at puck.nether.net
> https://puck.nether.net/mailman/listinfo/juniper-nsp
>
_______________________________________________
juniper-nsp mailing list juniper-nsp at puck.nether.net
https://puck.nether.net/mailman/listinfo/juniper-nsp