•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
•
9 Tunneling management
GRE tunnel configuration
Configuration algorithm
IP-GRE tunnel configuration example
DMVPN configuration
Configuration algorithm
Configuration example 1
Configuration example 2
L2TPv3 tunnel configuration
Configuration algorithm
L2TPv3 tunnel configuration example
IPsec VPN configuration
Route-based IPsec VPN configuration algorithm
Route-based IPsec VPN configuration example
Policy-based IPsec VPN configuration algorithm
Policy-based IPsec VPN configuration example
Remote Access IPsec VPN configuration algorithm
Remote Access IPsec VPN configuration example
LT tunnels configuration
Configuration algorithm
Configuration example
9.1 GRE tunnel configuration
GRE (Generic Routing Encapsulation) is a network packet tunneling protocol. Its main purpose is to
encapsulate packets of the OSI model network layer into IP packets. GRE may be used for VPN establishment
on 3rd level of OSI model. In ESR router implemented static unmanageable GRE tunnels, i.e. tunnels are
created manually via configuration on local and remote hosts. Tunnel parameters for each side should be
mutually agreeable, otherwise transferred data will not be decapsulated by the partner.
9.1.1 Configuration algorithm
Step Description Command Keys
1 Configure L3 interface from which a
GRE tunnel will be built.
2 Create a GRE tunnel and switch to its
configuration mode.
esr(config)# tunnel gre <INDEX> <INDEX> – tunnel identifier, set
in the range of:
for ESR-10/12V(F)/14VF
– [1..10];
for ESR-20/21/100/200 –
[1..250];
for ESR-1000/1200/1500
/1511/1700/3100 –
[1..500].
3 Specify VRF instance, in which the
given GRE tunnel will operate
(optionally).
esr(config-gre )# ip vrf forwarding
<VRF>
<VRF> – VRF name, set by the
string of up to 31 characters.