Re: GRE Tunnel

From: Fahad Khan (fahad.khan@gmail.com)
Date: Mon Dec 29 2008 - 12:05:08 ARST


Dear
Put this and make it simple (I am sure both the physical interface ends are
reachable over cloud)

R1
tunnel source 150.1.0.1
tunnel destination 150.1.23.2

R2
tunnel source 150.1.23.2
tunnel destination 150.1.0.1

yes, Source and Dest must be reachable from one another.

regards,

On Mon, Dec 29, 2008 at 6:08 PM, Mujeeb Sarwar <mujeebsarwar@gmail.com>wrote:

> Hi,
>
> The main point here is that when GRE tunnel encapsulates a packet, it adds
> another IP header which would be external IP header which contains source
> ip
> address as defined in 'Tunnel Source' parameter and destination ip address
> as defined in 'Tunnel Destination' parameter. So 'tunnel source' should be
> same as 'tunnel destination' on the other side to pass the check when
> Remote
> Router would de-encapsulate the recieved packet and to identify the logical
> Tunnel using (SA , DA ) pair otherwise packet will be discarded.
>
>
> Regards,
>
> Mujeeb
>
> On Sun, Dec 28, 2008 at 6:09 PM, GAURAV MADAN <gauravmadan1177@gmail.com
> >wrote:
>
> > depends on what full reachability means to you and whats task previous to
> > this has instructed you for .
> >
> > can b possible very much possible that a particular dest is not reachable
> > via 150.1.1.1 (depends on ur routing section tasks ).
> >
> > but my point was that for a gre tunnel whatever src and dest u specify ;
> > dts
> > should be reachabel from src
> >
> > Gaurav Madan
> >
> > On Sun, Dec 28, 2008 at 7:21 PM, Mahesh Shivaswamy
> > <maheshs.cisco@gmail.com>wrote:
> >
> > > Gaurav,
> > >
> > > When there is full reachilibility, why can't one ping 154.1.23.2 with
> sou
> > > 150.1.1.1 ??
> > >
> > > Mahesh
> > >
> > > On Sun, Dec 28, 2008 at 7:30 AM, GAURAV MADAN <
> > gauravmadan1177@gmail.com
> > > > wrote:
> > >
> > >> Nitro
> > >>
> > >> When u say that option 2 worked for u that means in ur case 150.1.1.1
> > was
> > >> reachable from 150.2.2.2 and vice versa as well ( ping 150.1.1.1 sou
> > >> 150.2.2.2) would have worked ,, thats why tunnel came UP.
> > >>
> > >> In 2md case which didnt worked for u .... ping 154.1.23.2 sou
> 150.1.1.1
> > >> would not have been through .. thats why tunnel didnt came UP .
> > >>
> > >> So the point here is dest shd be reachable from src ..
> > >>
> > >> Gaurav Madan
> > >>
> > >> On Sun, Dec 28, 2008 at 4:24 PM, Nitro Drops <nitrodrops@hotmail.com>
> > >> wrote:
> > >>
> > >> > Hi All,
> > >> >
> > >> > when configuring GRE tunnel
> > >> >
> > >> > R1 s1/0 - Cloud - s1/0 R2 (With full reachability)
> > >> > R1 s1/0 : 154.1.0.1
> > >> > R1 Loopback : 150.1.1.1
> > >> > R2 s1/0 : 154.1.23.2
> > >> > R2 Loopback : 150.1.2.2
> > >> >
> > >> > Option1
> > >> > R1
> > >> > tunnel source 150.1.1.1
> > >> > tunnel destination 150.1.2.2
> > >> >
> > >> > R2
> > >> > tunnel source 150.1.2.2
> > >> > tunnel destination 150.1.1.1
> > >> >
> > >> > Option 2
> > >> > R1
> > >> >
> > >> > tunnel source 150.1.1.1
> > >> >
> > >> > tunnel destination 154.1.23.2
> > >> >
> > >> >
> > >> >
> > >> > R2
> > >> >
> > >> > tunnel source 150.1.2.2
> > >> >
> > >> > tunnel destination 154.1.0.1
> > >> >
> > >> >
> > >> > Qns.) does the R1's tunnel destination needs to match R2's tunnel
> > >> source?
> > >> > Whilst labbing just now, i realised option2 cant work for GRE
> tunnel.
> > >> >
> > >> > Cheers
> > >> > Nit
> > >> >
> > >> > _________________________________________________________________
> > >> > It's simple! Sell your car for just $40 at CarPoint.com.au<http://carpoint.com.au/>
> <http://carpoint.com.au/>
> > <http://carpoint.com.au/>
> > >> <http://carpoint.com.au/>
> > >> >
> > >> >
> > >>
> >
> http://a.ninemsn.com.au/b.aspx?URL=http%3A%2F%2Fsecure%2Dau%2Eimrworldwide%2E
> > >> >
> > >> >
> > >>
> >
> com%2Fcgi%2Dbin%2Fa%2Fci%5F450304%2Fet%5F2%2Fcg%5F801459%2Fpi%5F1004813%2Fai%
> > >> > 5F859641&_t=762955845&_r=tig_OCT07&_m=EXT
> > >> >
> > >> >
> > >> > Blogs and organic groups at http://www.ccie.net
> > >> >
> > >> >
> > _______________________________________________________________________
> > >> > Subscription information may be found at:
> > >> > http://www.groupstudy.com/list/CCIELab.html
> > >>
> > >>
> > >> Blogs and organic groups at http://www.ccie.net
> > >>
> > >>
> _______________________________________________________________________
> > >> Subscription information may be found at:
> > >> http://www.groupstudy.com/list/CCIELab.html
> >
> >
> > Blogs and organic groups at http://www.ccie.net
> >
> > _______________________________________________________________________
> > Subscription information may be found at:
> > http://www.groupstudy.com/list/CCIELab.html
>
>
> Blogs and organic groups at http://www.ccie.net
>
> _______________________________________________________________________
> Subscription information may be found at:
> http://www.groupstudy.com/list/CCIELab.html
>
>
>
>
>
>
>
>

-- 
Fahad Khan
http://fahad-internetworker.blogspot.com

Blogs and organic groups at http://www.ccie.net



This archive was generated by hypermail 2.1.4 : Thu Jan 01 2009 - 12:53:10 ARST