3D Innovations 3.0.1 appendix GRE Modes, FlexConfig see Working with FlexConfigs

Appendix B Site-to-Site VPN User Interface Reference

		Site to Site VPN Policies
Table B-20	Public Key Infrastructure (PKI) Page (continued)
Element		Description
Save button		Saves your changes to the server but keeps them private. To publish
		your changes, click the Submit button on the toolbar.
		Note To save the RSA key pairs and the CA certificates between
		reloads permanently to Flash memory on a PIX firewall
		version 6.3, you must configure the "ca save all" command.
		You can do this manually on the device or using a
		FlexConfig (see Working with FlexConfigs, page 16-40).
Close button		Closes the Site-to-Site VPN window.
Help button		Opens help for this page.

GRE Modes Page

Use the GRE Modes page to define the routing and tunnel parameters, that enable you to configure IPSec tunneling with GRE, GRE Dynamic IP, and DMVPN policies.

The elements that are displayed on the GRE Modes page depend on the selected IPSec technology—GRE, GRE Dynamic IP, or DMVPN. For more information, see Understanding IPSec Technologies and Policies, page 9-8.

Table B-21 on page B-60describes the elements on the GRE Modes page for configuring IPSec tunneling with GRE or GRE Dynamic IP.

Table B-22 on page B-65describes the elements on the GRE Modes page for configuring DMVPN.

Note When configuring a GRE, GRE Dynamic IP, or DMVPN routing policy, Security Manager adds a routing protocol to all the devices in the secured IGP, on deployment. If you want to maintain this secured IGP, you must create a router platform policy using the same routing protocol and autonomous system (or process ID) number as defined in the GRE Modes policy.

For more information about GRE and GRE Dynamic IP policies, see

Understanding GRE, page 9-86 and Understanding GRE Configuration for

Dynamically Addressed Spokes, page 9-90.

	User Guide for Cisco Security Manager 3.0.1
OL-8214-02		B-59