Site to site GRE over IPSec

RouterOS General
1

Hi,

I am trying to create scalable, encrypted site to site connectivity between my on premise routers (CCR) and AWS cloud based routers (VyOS). I would like to use something like GRE inside IPSec as I prefer not use use policy based IPSec. Can the Mikrotik GRE/IPSec implementation be used between Mikrotik and other routers or is this Mikrotik specific? If it is Mikrotik specific, can IPSec and GRE be configured manually (separately) and the GRE tunnel peers addresses (169.254.1.0/30) configured in a single IPSec policy to achieve the same goal as GRE/IPSec? Using the GRE/IPSec functionality on the CCR side, I am having much difficulty to get phase 2 up on on the VyOS side and I just want to make sure that I am not trying something that its not intended for.

Thanks
Capture.JPG

RouterOS 6.42.6
/interface gre
add allow-fast-path=no ipsec-secret=secret-here local-address=180.0.0.1 name=gre1 remote-address=190.0.0.1
2

With public IPs it is very simple to connect gre over IPsec between 2 sites. Also it has to be simple to manage manual ipsec configuration with pure gre tunnel.

3

Thanks, got it fixed by configuring IPSec and GRE separately. Works well for me and much simpler than policy based IPSec.