Directing Traffic into the GRE Tunnel
You can direct traffic into a GREGeneric Routing Encapsulation. GRE is an IP encapsulation protocol that is used to transport packets over a network. tunnel by configuring a Static route, which directs traffic to the IP address of the tunnel, or a Firewall policy (session-based ACL), that redirects traffic to the specified tunnel ID.
The following sections describe:
You can configure a static route that specifies the IP address of a tunnel as the next-hop for traffic for a specific destination. See Configuring Static IP Routes for detailed information on how to configure a static route.
|
|
While redirecting traffic into a Layer-3 GREGeneric Routing Encapsulation. GRE is an IP encapsulation protocol that is used to transport packets over a network. tunnel via a static route, be sure to use the tunnel IP address of the controller as the next-hop, instead of providing the tunnel IP address of the destination controller. |
Referring to , the following are examples of the required static route configurations to direct traffic into the IPv4 Layer-3 GREGeneric Routing Encapsulation. GRE is an IP encapsulation protocol that is used to transport packets over a network. tunnel. for Controller-1 and Controller-2:
For the controller named Controller-1:
(host) [mynode] (config) # ip route 20.20.202.0 255.255.255.0 1.1.1.1
For the controller named Controller-2:
(host) [mynode] (config) # ip route 10.10.101.0 255.255.255.0 1.1.1.2
Traffic redirected by a firewallFirewall is a network security system used for preventing unauthorized access to or from a private network. policy rule is not forwarded to a tunnel that is “down” (see the next section, GRE Tunnels, for more information on how GREGeneric Routing Encapsulation. GRE is an IP encapsulation protocol that is used to transport packets over a network. tunnel status is determined). You can configure a firewallFirewall is a network security system used for preventing unauthorized access to or from a private network. policy rule to redirect selected traffic into a GREGeneric Routing Encapsulation. GRE is an IP encapsulation protocol that is used to transport packets over a network. tunnel using the WebUI or CLICommand-Line Interface. A console interface with a command line shell that allows users to execute text input as commands and convert these commands to appropriate functions..
To direct traffic into a GREGeneric Routing Encapsulation. GRE is an IP encapsulation protocol that is used to transport packets over a network. tunnel via a firewallFirewall is a network security system used for preventing unauthorized access to or from a private network. policy via the WebUI:
1. On the node hierarchy, navigate to the tab.
2. Create a new firewallFirewall is a network security system used for preventing unauthorized access to or from a private network. policy by clicking + below the table. The popup window appears.
3. Enter the .
4. For , specify (the default).
5. Click .
6. Click .
7. In the window, select the check box and click
8. To create a new policy rule for that policy, select the new policy in the Policies table, then scroll to the table (below the table) section and click +.
a. Select the and click .
b. Specify the .
c. For , select or .
d. Configure any additional settings.
9. Click .
10. Click .
11. In the window, select the check box and click .
To direct traffic into a GREGeneric Routing Encapsulation. GRE is an IP encapsulation protocol that is used to transport packets over a network. tunnel via a firewallFirewall is a network security system used for preventing unauthorized access to or from a private network. policy (session-based ACLAccess Control List. ACL is a common way of restricting certain types of traffic on a physical port.) via the CLICommand-Line Interface. A console interface with a command line shell that allows users to execute text input as commands and convert these commands to appropriate functions., use the following command:
(host) [mynode] (config) #ip access-list session <name>
<source> <destination> <service> redirect tunnel <id>
Was this information helpful?
Great! Thanks for the feedback
Sorry about that! How can we improve it? Send your comments and suggestions!