B-59
User Guide for CiscoSecurity Manager3.0.1
OL-8214-02
AppendixB Site-to-Site VPN User Interface Reference Site to Site VPN Policies
GRE Modes Page
Use the GRE Modes page to definethe routing and tunnel parameters, that enable
you to configure IPSec tunneling with GRE, GRE Dynamic IP, and DMVPN
policies.
The elements that are displayed on the GRE Modes page depend on the selected
IPSec technology—GRE, GRE Dynamic IP, or DMVPN. For more information,
see Understanding IPSec Technologies and Policies, page 9-8.
TableB-21 on page B-60 describes the elements on the GRE Modes page for
configuring IPSec tunneling with GRE or GRE Dynamic IP.
TableB-22 on page B-65 describes the elements on the GRE Modes page for
configuring DMVPN.
Note When configuringa GRE, GRE Dynamic IP, or DMVPN routing policy, Security
Manager adds a routing protocol to all the devices in the secured IGP, on
deployment. If you want to maintain this secured IGP, you must create a router
platform policy using the same routing protocol and autonomous system (or
process ID) number as defined in the GRE Modes policy.
For more information about GRE and GRE Dynamic IP policies, see
Understanding GRE, page 9-86 andUnderstanding GRE Configuration for
Dynamically Addressed Spokes, page 9-90.
Save button Savesyour changes tothe server butkeeps themprivate. Topublish
your changes, click the Submit button on the toolbar.
Note Tosave the RSA key pairs and the CA certificates between
reloads permanently to Flash memory on a PIX firewall
version 6.3, you must configurethe "ca save all" command.
You can do this manually on the device or using a
FlexConfig (see Working with FlexConfigs, page 16-40).
Close button Closes the Site-to-Site VPN window.
Help button Opens help for this page.
TableB-20 Public Key Infrastructure (PKI) Page (continued)
Element Description