Pure IPsec tunnels drop the multicast packets that dynamic routing protocols like OSPF require. This operational guide shows you how to wrap GRE in IPsec transport mode on Linux, securing branch-to-branch links while maintaining dynamic route adjacencies.