This actually uses SDM to setup a GRE over IPsec VPN (Only IPsec is necessary for CCNA Security) but the configuration is very similar... at least when using SDM... Jeremy Ciaora's video touches on it briefly and Chris Bryant's Train Signal video actually shows a basic GRE setup.. Regardless, it would definitely behoove a CCNA Security candidate to lab this one out a few times! NOTE: Need either a real lab (best method) or an SDM/GNS3 setup (never did this myself)! Note that the videos I touched on above were very thorough in setup but neither goes into much detail regarding config editing or extracting info which (in my experience) will be the stuff that Cisco wants you to know.. You know.. troubleshooting! I hope this helps!
B Haines
CCNA R&S, ETA FOI
B Haines
CCNA R&S, ETA FOI