GRE over IPsec

1.EG2-R2做GRE隧道  并使用ipsec封装

EG2上配置 tunnel ip GRE IPsec

interface Tunnel 0
 ip address 22.1.1.1 255.255.255.0
 tunnel source 26.1.0.2
 tunnel destination 62.1.0.2
ex

ip access-list extended 101
 10 permit gre host 26.1.0.2 host 62.1.0.2

crypto isakmp policy 10
 encryption 3des
 authentication pre-share
 hash md5
 group 2
exit

crypto isakmp key 7 1014162a0c1c address 62.1.0.2
crypto ipsec transform-set mytest esp-des esp-md5-hmac
 mode transport
exit

crypto map mytest 10 ipsec-isakmp
 set peer 62.1.0.2
 set transform-set mytest
 set autoup
 match address 101
end 
show crypto isakmp sa