Communiquez avec les autres et partagez vos connaissances professionnelles

Inscrivez-vous ou connectez-vous pour rejoindre votre communauté professionnelle.

Suivre

What's the difference between GRE and IPSEC? Where we use them?

user-image
Question ajoutée par Zia Meer , IT Director , Exceed Solutions
Date de publication: 2014/03/25
Raheem R
par Raheem R , IT security engineer , Wayzon Infotech

GRE is a tunneling protocol which is used to transport multicast, broadcast and non-IP packets like IPX etc.(Encapsulation method)

 IPSec is an encryption protocol(Security)

IPSec can only transport unicast packets not multicast & broadcast.

Bassel Kablawi
par Bassel Kablawi , NOC Engineer , ScopeSky Communication

GRE allows you to creat point-to-point tunnel, it's unsecure, IPsec is a protocol represents to Internet Protocol securre, and you can use it in your traffic while using GRE tunnel.

So, you can encrypt and secure your date the send through GRE tunnel using IPsec

 

Utilisateur supprimé
par Utilisateur supprimé

In summary, use a GRE tunnel where IP tunneling without privacy is required — it’s simpler and thus faster. But use IPsec ESP where IP tunneling and data privacy are required — it provides security features that are not even attempted by GRE. So,
  •  IPsec stands for Internet Protocol Security while GRE stands for Generic Routing Encapsulation.
  • IPsec is the primary protocol of the Internet while GRE is not.
  • GRE can carry other routed protocols as well as IP packets in an IP network while Ipsec cannot.
  • IPsec offers more security than GRE does because of its authentication feature.

Mohmad Zaffer
par Mohmad Zaffer , Network Engineer , Aljazirah Printing & Publishing

1) In IPsec the traffic gets encrypted while in GRE the traffic does not get encrypted.

2) we cannot run Dynamic Routing Protocols in Ipsec. In GRE we can use Dynamic Routing Protocols.

3) No need to create separate Tunnel interface in IPSEC. In GRE separate tunnel interface needs to be created. 

 

More Questions Like This