Switch(config-if-Tu0)#tunnel ipsec profile vrouter Switch(config-if-Tu0)#tunnel destination 1.0.0.2

Switch(config-if-Tu0)#tunnel source 1.0.0.1 The transport option under the IPsec mode has no effect.

This ensures that the packets forwarded on the interface are encrypted. IPsec then encrypts the GRE packet, which results in the packet being encapsulated and encrypted by the IPsec header.

In GRE-over-IPsec encapsulation mode, the application payload is first encapsulated within a GRE packet.

The tunnel types are determined based on the encapsulation mode. The CloudEOS and vEOS Router supports the use of two basic types of IPsec tunnels.