CloudEOS and vEOS Router (GRE-over-IPsec Tunnel)

The IPsec tunnels represented in these examples include GRE-over-IPsec tunnels on CloudEOS and vEOS Router instances.

Running Configuration for CloudEOS and vEOS

ip security
ike policy ikebranch1 encryption aes256 dh-group 15
sa policy sabranch1 sa lifetime 2
pfs dh-group 14
profile hq
ike-policy ikebranch1 sa-policy sabranch1 connection add
shared-key keyAristaHq dpd 10 50 clear

interface Tunnel1
ip address tunnel mode gre tunnel source
tunnel destination tunnel ipsec profile hq

interface Ethernet1 no switchport
ip address