R1(config)# interface Tunnel 0
R1(config-if)# tunnel protection ipsec profile Protect-GRE