GRE Tunnel Profile

GRE (Generic Routing Encapsulation) tunnels are a type of virtual point-to-point connection that encapsulates a wide variety of network layer protocols within the Internet Protocol (IP) suite. GRE creates a direct link between two networks over the internet or other IP-based networks, allowing for data packets from one network to travel to another without modification. Layer 2 GRE tunnels allow you to have the same VLAN in multiple locations (separated by a layer 3 network) and be connected. The forwarding method for a layer 2 GRE tunnel is bridging. The benefit of layer 3 GRE tunnels is that broadcasts are not flooded through the tunnel, so there is less wasted bandwidth and less load on the Branch Gateway. The forwarding method for a layer 3 GRE tunnel is routing.

Creating an GRE Tunnel Profile

To create an GRE Tunnel profile, complete the following steps:

  1. In the HPE Aruba Networking Central landing page, click the configurationicon.
    The Profiles tab is displayed.

  2. In the left navigation menu, select one of the following options:

    • Library—This is the default selection. If you create profiles in the Library, then you must assign scope and device functions to the profiles. For more information, see Assigning Scope to a GRE Tunnel Profile.

    • Global—If you create profiles at the Global level, then the profiles have Global scope assigned by default.

    • Site Collections—If you create profiles at the Site Collections level, then the profiles have site collection scope assigned by default.

    • Sites—If you create profiles at the Site level, then the profiles have site scope assigned by default.

    • Devices—If you create profiles at the Device level, then the profiles have device scope assigned by default.

    • Device Groups—If you create profiles at the Device Group level, then the profiles have device group scope assigned by default.

    Note:

    • To create profiles at the Global level, select the device type from the Device Function drop-down list before step 4.
    • To create profiles at the Site Collections, Sites, Devices, and Device Groups level, complete the following steps before step 4:
      1. Select Site Collections, Sites, Devices, or Device Groups in the left navigation menu.
      2. Select a site collection, site, device, or device group from the list view depending on the level where you are creating the profile.
      3. Select the device type from the Device Function drop-down list.

  3. On the Tunnels card, click GRE Tunnel.

    Alternatively, you can complete the following steps:

    1. On the Tunnels card, click Manage.

    2. On the GRE Tunnel card, click Manage.

    The GRE Tunnel list view is displayed.

  4. Click Create Profile.

    The Create Profile side panel is displayed

  5. Configure the parameters as described in the following table.

    Table 1: GRE Tunnel Profile Parameters

    Parameter

    Description

    Create as a local profile

    Select this option if you want to configure this profile as local.

    The Create as a local profile option is available at the Global, Site Collections, Sites, Devices, and Device Groups levels; it is not available at the Library level.

    Description

    Enter a brief description for the GRE Tunnel profile.

    IP Version

    Select the type of IP version from the drop-down list. For example, IPv4 or IPv6.

    Tunnel ID

    Enter an ID for the GRE tunnel.

    Mode

    Select a mode for the GRE tunnel. For example, L2 or L3.

    Encapsulated Protocol Type

    Select the type of encapsulated protocol from the drop-down list. This parameter is available only when IPv4 version and L2 mode is selected.

    • Transparent Ethernet Bridging—Select this option for transparent Ethernet bridging.
    • Custom—Select this option for a custom type of encapsulated protocol. Specify the type of custom protocol in Custom Protocol Type* text-box.

    Allowed VLANs

    Specify the VLAN IDs of all the interfaces from which the traffic to be encapsulated originate. This parameter is available only when IPv4 version and L2 mode is selected.

    IPv4 Prefix

    Specify the IPv4 address. This parameter is available only when IPv4 version and L3 mode is selected.

    IPv6 Address

    Specify the IPv6 address. This parameter is available only when IPv6 version and L3 mode is selected.

    Enable

    Select this check-box to enable OpenFlow on the tunnel.

    Client Authentication

    Select this check-box to enable client authentication.

    Inter-Tunnel Flooding

    Select this check-box to disable inter tunnel flooding.

    Tunnel MTU

    Specify the MTU size for the tunnel interface in the MTU field. The allowed MTU range is 1024-9216.

    Tunnel Source

    Select a type of tunnel source from the drop-down list:

    • Loopback—Select this option to set the loopback IP as your tunnel source.
    • IP Address—Select this option if you have a specific IP address as the tunnel source and specify an IP address in the IP Address* text-box.
    • System-IP—Select this option if the tunnel source is the IP address of the gateway being configured.
    • VLAN—Select this option if the tunnel source is a specific VLAN and specify a VLAN in the VLAN* text-box.

    Tunnel Destination

    Specify the destination IP address of the tunnel.

    Keepalive Heartbeats

    Select this check-box to enable tunnel keepalives.

    • Specify a value for Heartbeat interval*. The default value is 10 seconds.
    • Specify a value for Heartbeat retries*. The default value is 3 retries.

  6. Click Create.
    The newly created GRE tunnel profile is displayed in the GRE Tunnel list view.

  7. To edit a GRE Tunnel profile, complete the following steps:

    2. Click anywhere on the row of the profile in the list view.

      3. The Edit Profile view is displayed in the side panel.

    3. Edit the required parameters.

    4. Click Update.

  8. To delete an GRE Tunnel profile, hover on the profile name, and click the delete icon.

Assigning Scope to a GRE Tunnel Profile

For profiles created under Library, you must assign a scope and device function to be able to use its features and functionality.

To assign scope to a profile, complete the following steps:

  1. In the HPE Aruba Networking Central landing page, click the configurationicon.

    The Profiles tab is displayed.

  2. Ensure that the default option Library is selected in the left navigation menu.

  3. On the Tunnels card, click GRE Tunnel.

    Alternatively, you can complete the following steps:

    1. On the Tunnels card, click Manage.

    2. On the GRE Tunnel card, click Manage.

    The GRE Tunnel list view is displayed.

  4. Hover on the profile to which you want to assign a scope and click the ellipsis icon.

  5. Select Assign.

    The Assign Profile side panel is displayed.

  6. Select the device types from Device Function list.

  7. To add a scope, click the Add icon on the Scopes table.

  8. Select a scope from the following Scope Level options in the drop-down list.

    • Global—Selecting this option assigns the scope at the Global level.

    • Site Collections—Select the site collections from the Assign to Scope drop-down list.

    • Sites—Select the sites from the Assign to Scope drop-down list.

    • Devices—Select the devices from the Assign to Scope drop-down list.

    • Device Groups—Select the device groups from the Assign to Scope drop-down list.

  9. Click Add.

    The Scopes table displays the newly added scopes.

  10. Click Assign.

    The GRE Tunnel list displays the device functions and number of scopes assigned to the profile.

  11. To unassign a scope from a profile, complete the following steps:

    1. Hover on the profile name and click the ellipsis icon.

    2. Select Unassign.

    3. Select the required scope and click Unassign.

  12. To customize the GRE Tunnel profile list, click the Table Menu icon. For more information, see Customizing List.