Tunneling GRE within IPsec would work, but I would only suggest it if you are trying to tunnel non-IP packets. If you're just trying to tunnel IP packets, then just use IPsec's tunnel-mode and be done with it.
Lars -- Lars Eggert <larse@xxxxxxx> USC Information Sciences Institute
Attachment:
smime.p7s
Description: S/MIME Cryptographic Signature