bsdperimeter/pfsense — pull request #118 by grangej (2012-06-01 06:01:43+00:00)
Title: Initial support for Cisco IPSec over GRE tunnels (Take 2)

The current state of the ipsec transport mode w/ gre tunnels is NOT compatible with Cisco routers / VPN concentrators.

Cisco expects :

1) only GRE packets should be encrypted not ANY
2) Only outgoing packets coming from local -> remote of type GRE should match on each end (not bidirectional).

The updated php and inc files take care of making a compatible tunnel, but it appears to break the IPSec monitoring on PFSense (the tunnel DOES work though).

Feel free to email me if you have any questions, this was tested with IOS 12.4.x on both 7200 and 2921 routers.

--- Updated merged with correct version of source. Sorry!

Signed-off-by: John Grange