topic How to IPSec over GRE with dynamic routing in General Topics

How to IPSec over GRE with dynamic routing

jac101 — Tue, 11 Apr 2017 02:22:57 GMT

I saw a document on how to configure VTI tunnel with OSPF. But that is for PAN-OS 4.1. Does anybody know if PAN-OS 7.1 supports GRE tunnel? I need to configure IPSec over GRE on the Palo Alto to talk to a Cisco router. Thanks

Re: How to IPSec over GRE with dynamic routing

reaper — Tue, 11 Apr 2017 07:06:43 GMT

Hi @jac101

GRE is not supported, only IPSec

Re: How to IPSec over GRE with dynamic routing

birkhojk — Thu, 13 Apr 2017 19:37:40 GMT

Actually the Tunnel interfaces themselves are GRE even though it does nto say that anywhere...

Wghen you get a padlock next to it, the interface is encrypted via IPSec.... That is the same as a security association on the Cisco.

Please see this artlce.

https://live.paloaltonetworks.com/t5/Configuration-Articles/How-to-Configure-IPSec-VPN/ta-p/56535