Hello all,
I’m testing GRE over IPSec and everything works well in the lab using the defaults, but I cannot make GRE use a custom IPSec policy, proposal etc.
Is there any way to make GRE use my custom IPSec configuration?
Thanks,
Instead of using the “IPsec secret” option in the GRE menu, you can add a custom identity which would be configured with the custom IPsec configuration
I’ve run into this too. It is unfortunate you cannot set IPSec profile along with GRE’s ipsec-secret in the GRE config.
As @TheCat12 suggests, you can do it manually. One thing to help is use the “ipsec-secret” as you have initially, but a make a copy of “D” dynamic/automatic things in /ip/ipsec that GRE creates, and set whatever on your own static copy. Then, remove the secret from GRE itself - so it does not create IPSec from GRE interface, and uses the copy+modified static IPSec config that mimic the automatic ones. Since it sometimes tricky to get the right initials options in IPSec from scratch.
Initially I have manually created the IPsec configs but GRE ignore them. I will do a copy and get back to you.
Thank you for now.
I can’t seem to make it work. The IPsec connection PH1 is established and on PH2 I get ready to send which I guess is expected.
Somehow I need to associate the GRE interface with the IPsec config.
On the IPsec peer I have the public IPs and the same is configured on the GRE interface.
Damn… after my previous comment it started working.
Thank you very much guys, much appreciated it.