How to IPSec over GRE with dynamic routing

[jac101]

I saw a document on how to configure VTI tunnel with OSPF. But that is for PAN-OS 4.1. Does anybody know if PAN-OS 7.1 supports GRE tunnel? I need to configure IPSec over GRE on the Palo Alto to talk to a Cisco router. Thanks

[reaper]

Hi @jac101

GRE is not supported, only IPSec

[birkhojk]

Actually the Tunnel interfaces themselves are GRE even though it does nto say that anywhere...

Wghen you get a padlock next to it, the interface is encrypted via IPSec.... That is the same as a security association on the Cisco.

Please see this artlce.

https://live.paloaltonetworks.com/t5/Configuration-Articles/How-to-Configure-IPSec-VPN/ta-p/56535