GRE over IPsec

GRE carries what IPsec alone cannot; IPsec encrypts it.

Niche · 40 EncryptedSite to site

How widely is it used?

Used for specific scenarios

Still essential where routing protocols or multicast must cross the WAN.

Generate a GRE over IPsec config

Built in your browser from your own server details. Nothing is uploaded or stored.

Generate a GRE over IPsec config

How it works

GRE wraps the original packets in a routable tunnel that can carry multicast and routing protocols, and the GRE tunnel itself is then protected by IPsec transport or tunnel mode.

Connects

Router/network → router/network

Protocols

GRE, IPsec

Typical users

Enterprises running dynamic routing between sites

Main use case

Carrying OSPF/EIGRP or multicast across an encrypted WAN.

Advantages

Supports traffic plain IPsec will not carry
Routing protocols work across the tunnel

Limitations

Extra header overhead and MTU headaches
More moving parts to configure

Related VPN types

DMVPN

Declining

Spokes discover each other and build direct tunnels on demand.

Generate config

IPsec VPN

Most used

The IETF standard for authenticating and encrypting IP packets.

Generate config

Site-to-Site VPN

Most used

Two gateways hold a permanent tunnel so whole networks can talk.

Generate config

All 34 VPN types Compare side by side