Cisco Systems Questions about VPN phases on cisco

Bookmark this page:  YahooMyWeb Yahoo!  Google Google  Windows Live Favorites Windows Live  del.icio.us del.icio.us  digg digg  Add to Netscape Netscape
Subject Author Date
Questions about VPN phases on cisco Elia S. 02-02-10
Posted by Elia S. on February 2, 2010, 5:32 am
Please log in for more thread options


Hello
I have a GRE+IPSEC tunnel between two routers

HQ C2651XM with AIM VPN EP ios 12.4(15)T9 and C831 12.4(18)

phase 1

3des
sha
group2


phase 2
3des esp sha

-----------------------

Question 1)

Both the ciscos have 3des/des hardware assisted encryption so I don't get
any performance hit using that cyphers.

The phase 1 is used only to establish tunnel, right? So if I put for example

phase1:
aes 256
sha
group 5

I just use more cpu cycles at the establishment of the tunnel, but once the
tunnel is established I don't have any performance hit?

question 2)

In a gre+ipsec tunnel is the same, to apply the crypto map on the phisical
interface where the tunnel is terminated, or applying the tunnel security
ipsec... on the tunnel interface?
I think that applying a tunnel security policy on the tunnel, changes the
tunnel from GRE to IPSEC tunnel ipv4. right?


thank you


Similar ThreadsPosted
Questions about VPN phases on cisco February 2, 2010, 5:32 am
Cisco CNA questions June 17, 2005, 11:46 pm
Cisco Wireless Questions May 10, 2006, 12:19 pm
Questions to Cisco SecureACS October 18, 2006, 3:42 am
Cisco Equipment Questions April 18, 2007, 5:14 am
New Cisco Gear and some questions... October 30, 2008, 3:27 am
cisco wic vwic nm card questions November 15, 2005, 11:42 am
Cisco 871 - Wireless setup questions May 26, 2006, 11:40 am
Cisco IDS 4210 Follow-up questions August 15, 2006, 3:11 pm
Cisco Network Assistant questions August 27, 2006, 7:47 am
Questions: Cisco Catalyst 5000 June 13, 2005, 9:10 am
cisco experts pls answer these questions October 16, 2006, 4:22 am
Several questions about Cisco devices and SNMP February 16, 2007, 6:10 am
tough and challenge questions from a cisco exam.need help. thankyou very much March 31, 2006, 7:30 pm
Questions on Cisco 3200 MAR Temperature Voltage information July 11, 2006, 1:37 pm
Residential Cabling Guide

Home Cabling Guide

Finally, an instantly downloadable book that saves you thousands in home improvement dollars! Enjoy living in 21st century technology-advanced home while increasing its selling value and competitive advantage on the real estate market. Whether your cabling is for home office or high-tech leisure, you can wire your home yourself or learn "wirish" to speak with your cabling contractors in their language!

Learn More