Tag Info

Hot answers tagged


Yes. You can configure the gre interfaces, and then encrypt your gre interserver traffic with ipsec. Same thing is achievable with ipip (some UNIX systems calls this type of interface gif). But, actually, it's an old legacy way. What is even more legacy - is configuring a non-gre ipsec, because this way it will be hard to support and almost unrouteable, ...


You're kind of fighting against the natural tendencies of how source IP address selection works when trying to do this. So why not just change your design up a little bit for it to flow more naturally? The problem is that source IP address selection is done prior to the decision to push traffic down the tunnel. That means that it'll choose to use the ...

Only top voted, non community-wiki answers of a minimum length are eligible