Communication Between LANs Through a GRE over IPSec Tunnel
If a dynamic routing protocol (such as OSPF
or RIP) runs inside two LANs, a GRE over IPSec tunnel, not a simple
IPSec tunnel, must be established between the egress gateways of the
LANs for secure communication.