Net Talk - GRE over IPsec

Рет қаралды 52,611

Kevin Wallace Training, LLC

4 жыл бұрын

In this "Net Talk" session, we cover the theory and configuration of GRE over IPsec VPNs.

Пікірлер: 81

@kenchiken6338 Жыл бұрын

I've been looking for an explanation like this for a while. I understand more from this 30 minute video than I ever have even in courses I paid for. Thanks for this!

@44black88 4 жыл бұрын

I just want say you do awesome work Kevin. I been following your channel for some time now. I got my CCNA before the deadline and now I'm after my CCNP. Great work!!! I always leave with little more confidence after you video instruction.

@Mrmagnodsb 3 жыл бұрын

Thank you for taking the time to make a video about this topic Kevin. Perfect explanation!!!

@srb1855 4 жыл бұрын

Most lucid explanation of gre-over-IPSec that I have seen! 👍

@paulmassingham550 3 ай бұрын

Just found this video, and I have to say this is the best explanation of how to configure GRE over IPSEC that I have seen. Thank you Kevin and keep up the great content.

@RK-ly5qj 2 жыл бұрын

Im not using Cisco equipment at all but, whole theory is very needed to understand how protocols works in fact. So i'm thankful to you for your spended time to share with us your knowledge. you're doing great job !

@rlopez3188 4 жыл бұрын

All I wanna say is thank you baby cheesus for dropping Kevin Wallace into this world!!! You sir are amazing!!! Your teaching style is simply awesome!!! Thanks for the videos and the knowledge transfer!!

@AlexisRamirez-qs7qe 2 жыл бұрын

Your videos helped me remember everything from my CCNA and helps apply it as well. Thank you so much for your videos.

@edrem0777 4 жыл бұрын

This explanation of GRE over IP sec is by far the best, simple, smooth, and to the point of what GRE over internet is...Thank you for taking the time to make these videos and teaching us so much.

@datedatekyal3650 3 жыл бұрын

Great explanation, Thanks, waiting for more net talk.

@mohammedosman4692 3 жыл бұрын

Thank you sir for such an awesome explanation. I love it 👏🏽👍🏽

@cddvdblurayful 8 ай бұрын

Sir, this is a treasure. Thank you for this!

@luykennethcarl 3 жыл бұрын

Thanks for this kevin.. more vids to come pleasee! Very help for us students

@mk-or8nm 3 жыл бұрын

I hit 'like' button as a 500th person. How is it possible that it is not 500k likes already? Great video Kevin as all of your videos thanks a lot for your work.

@joyhoo2041 3 жыл бұрын

your video is my favorite study video, simple and smooth,

@digew 4 жыл бұрын

Many thanks for explaining it smoothly.

@seagarts 2 жыл бұрын

Thank you Kevin for this elaborate understanding

@misterrestore7403 2 жыл бұрын

Thank you Kevin. Grate Session.. ! By the way on all your videos!

@howtobasicbreathe8457 4 жыл бұрын

As usual, amazingly well explained

@sudiptabhar3161 3 жыл бұрын

Cleared my All Doubts..THANK YOU SIR

@FerdsTechChannel 4 жыл бұрын

Thanks for this video, Kevin! I'm planning to make a video about this same topic.

@Bilal.Al-Sardar 3 жыл бұрын

Awesome video, great explanation.

@edohkakasomado2351 4 жыл бұрын

Great video...It has been very helpful for me

@krichklinhom5605 3 жыл бұрын

Hello , I'm from thailand country . I have a littel bit skill in english but i try to learning from you VDO and thank you sir for all video .

@ManishKumar-zf5rh 2 жыл бұрын

Thank you kavin. Such a lucid information

@mahenooransari14 3 жыл бұрын

thanks a lot....great help in understanding the concept

@donnyrap 3 жыл бұрын

Loved that Kevin ! Wonderful 😵

@mudasir2168 Жыл бұрын

crystal clear explanation!

@FerdsTechChannel 4 жыл бұрын

Thanks Kevin for reading my comment!

@aamm9129 2 жыл бұрын

CCNA 200-301 doing now thank you for this!

@BG-su1lv 2 жыл бұрын

Excellent.

@ashishlahunde4479 2 жыл бұрын

Thank you sir.🤗

@mariembuenaventura1278 3 жыл бұрын

Thank you !

@barakagarama1346 3 ай бұрын

Am on my way for my CCNA. 🎉🎉🎉

@apollosolutions9961 3 жыл бұрын

Nice video !

@snupi12345 4 жыл бұрын

Hello Kevin. Love your videos. I have a question about the illustration of GRE over IPsec on 15:15. Shouldn't there be the other way around? That is IPsec encapsulated inside the GRE tunnel? Especially if you use, in later configuration, mode transport, opposite to mode tunnel?

@giftmarshallchawira241 Ай бұрын

Wonderful

@refaiabdeen5943 Жыл бұрын

Cheers Mate.

@The_Son_of_Oden 3 жыл бұрын

Thank you Kevin I wish you could write all cisco books

@resres6596 3 жыл бұрын

Perfect 👍

@saibot293 4 жыл бұрын

Great video - I can actually listen to you for longer than most trainers.. question do I have to add the tunnel int to the routing protocol?

@kwallaceccie 4 жыл бұрын

Thanks! You don't have to (you could use static routes), but I did in this example. Specifically, I used the "network 0.0.0.0 255.255.255.255 area 0" command under each router's OSPF routing protocol configuration, making all active interfaces participate in the routing process.

@Hypocrisy.Allergic 9 ай бұрын

I swear IPsec is the most difficult subject for CCNP ENCOR for me, but great explanation as usual.

@fredaguilaracosta9685 4 ай бұрын

Hey Kevin Thanks for the video. What are your recommendations for a ccna guy wanting to do the ccnp with no much industry experience

@MrSauske98 Жыл бұрын

That's great

@nolmanbarroso8894 3 жыл бұрын

In releases before Cisco IOS 12.2(13)T, the crypto maps must be applied to both the physical interface and the logical interface (tunnel).

@andreslopez180 4 жыл бұрын

Kevin this is awesome example. Can you please make a video on the same topic but with DMVPN, My employer is expanding and I'm face with the challenge of connect the sites together.

@kwallaceccie 4 жыл бұрын

Thanks for the great suggestion! I'll definitely plan on doing a DMVPN video early next year.

@marcovanbrenk6951 4 жыл бұрын

@@kwallaceccie did you already create such great video for DMVPN? cheers

@RahulVishwakarma-uq5np 4 жыл бұрын

Great Sir

@zemtronix1 4 жыл бұрын

Kevin, do you have an outline that includes your slides for your routing and switching 200-125 video. It would help with taking notes when studying when following your video. Thanks

@kwallaceccie 4 жыл бұрын

Thanks so much for your interest. However, the slides are only available to those who enroll in my live training course.

@twrkmx 3 жыл бұрын

GOAT

@alvaroidrugo5346 4 жыл бұрын

Hello Kevin, This a great and simple explanation. I glad of that. I got a question. First you created a GRE tunnel which is the ovelay network. Then came in the IPSEC to provide protection to the information. But I can't realize on the configuration or what step is the join between the GRE tunnel 0 and the IPSEC config. Could you please point it out in which line command configuration that tie happens?

@Yooper_eh 3 жыл бұрын

If I understand your question (and the theory) correctly, the *crypto ipsec transform-set* statement creates the IPSec portion, the ACL named *GRE-IN-IPSEC* specifies the traffic and they are brought together by the *crypto map* policy named *VPN.* Looked at another way, it is the ACL that diverts the "interesting" GRE traffic through the IPSec tunnel. I hope that helps to answer your question (and that it's technically correct).

@odrommouniengue2645 4 ай бұрын

Thanks, Kevin, for this video. I have a question. why did you apply the configuration on tunnel 1 interface??

@claytonsmith6092 Жыл бұрын

Currently have a CCNA and want to get my CCNP.

@GadgetRobb 3 жыл бұрын

Could you have also used tunnel protection mode instead of the crypto map?

@bboymichaelyang Жыл бұрын

Is this setup behind a NAT router? I would like to see the entire configs on the router. Thanks

@jessicamann684 7 ай бұрын

GRE is configured with a destination IP address and two IP addresses for the internal tunnel (of a /30 subnet). If we configure more than one GRE tunnel on the same interface on a router, how does the router know which tunnel each incoming GRE packet belongs to?

@marcovanbrenk6951 4 жыл бұрын

Hi Kevin is tunnel protection ipsec profile not a better solution then crypto map?

@TheRawi Жыл бұрын

Hi Kevin, Nice tutorial there! I have only 1 question: is the tunnel creation mandatory for the IPsec to operate? Can we do the exact configuration but without creating the tunnel? If not, how does the router use the tunnel here? I see no command to link the tunnel with the IPsec in the configuration 🤔

@techevangelist8373 4 жыл бұрын

Great presentation. One question, i see some call this IPsec over gre and some say gre over IPsec. Which one is correct 😀

@kwallaceccie 4 жыл бұрын

You can do either one. However, this video covers taking the GRE unicast packets and sending them over IPsec.

@mitpatel4268 4 жыл бұрын

@@kwallaceccie Would you please inform me how would the vice versa (IPSec over GRE) be of any advantage at all? Is it really?

@robinkhn2547 3 жыл бұрын

Great video, but why did you use IKEv1? There already is a newer version of IKE, namely IKEv2, which is better than IKEv1.

@supunniwarthanarathnayake6503 Жыл бұрын

Instead of using crypto map VPN, we also can use crypto IPsec profile over the tunnel interface right?

@fredaguilaracosta9685 4 ай бұрын

More please

@perryuploads776 Жыл бұрын

Hi Kevin, love your videos but the mic volume was too low on this one. 😛 Edit: At 2:06 your sound was oke

@bobdavislumbro4047 5 ай бұрын

Hey kevin! quick question here @21:20 you said Routers create a layer 2 segment adjacency, why do we call it "layer two" if it also involves routing ? or is it because they are on the same subnet ?

@bobdavislumbro4047 3 жыл бұрын

So then, what is the benefit of data encapsulation if it does not provide security? thanks

@kwallaceccie 3 жыл бұрын

It can provide tunnels to create a virtual overlay network.

@bobdavislumbro4047 3 жыл бұрын

@@kwallaceccie thanks but then again... Does the tunnel provide any sort of security or anyone can see what's inside the tunnel payload etc

@pascaldufour9275 3 жыл бұрын

If GRE is established first. Doesn't that make it IPSEC over GRE ? I am confused

@wyohman00 4 жыл бұрын

Great job. My only critique is using ISAKMP/IKEv1 in examples. From a security perspective, no one should be using IKEv1 when IKEv2 is available. People will refer to this video and configure their production systems with what they've seen. Always practice like you would do in production.

@joyhoo2041 3 жыл бұрын

I have just passed my CCNP EI cert