Ccna routing and Switching Complete Study Guide

Cisco IPsec VTI (Cisco Proprietary)

The IPsec Virtual Tunnel Interface (VTI) mode of an IPsec configuration can greatly 

simplify a VPN configuration when protection is needed for remote access. And it’s a 

simpler option to GRE or L2TP for encapsulation and crypto maps used with IPsec. Like 

GRE, it sends routing protocol and multicast traffic, but you don’t need the GRE protocol 

and all the overhead that brings. A nice simple configuration and routing adjacency directly 

over the VTI offers many benefits. Understand that all traffic is encrypted and that it 

supports only one protocol—either IPv4 or IPv6, just like standard IPsec.

Now let’s take a look at how to configure a GRE tunnel. It’s actually pretty simple.