F3726, F3211, F3174, R5135, R3816-HP Firewalls and UTM Devices VPN Command Reference-6PW100

Default command level

2: System level

Parameters

mask: Mask of the private network IP addresses of the branch, in dotted decimal notation.

mask-length: Mask length of the private network IP addresses of the branch, in the range of 0 to 32.

Usage guidelines

After you configure a mask length with this command, the node at the headquarters establishes only one

tunnel entry for private IP addresses in the same subnet, therefore reducing the number of tunnel entries

on the node at the headquarters and allowing branches to initiate establishment of tunnels by sending

emulated data to the node at the headquarters.

This command is available only for P2MP GRE tunnel interfaces.

Modifying the mask will delete all tunnel entries created on the device. Therefore, execution of this

command requires your confirmation.

To use this command, make sure all the branch networks of the enterprise have the same mask length.

Otherwise, packet forwarding errors might occur. For a branch device with a different mask length, you

can configure NAT to make sure that after address translation the mask length of the branch meets the

consistency requirement.

The following matrix shows the gre p2mp branch-network-mask command and firewalls and UTM

devices compatibility:

Hardware Command com

atible

F1000-A-EI/F1000-S-EI Yes

F1000-E Yes

F5000 Yes

Firewall module Yes

U200-A Yes

U200-S No

Examples

# Configure the mask of the private network addresses of a branch as 255.255.255.0.

<Sysname> system-view

[Sysname] interface tunnel 0

[Sysname-Tunnel0] gre p2mp branch-network-mask 255.255.255.0

Warning: All tunnel table will be deleted. Continue? [Y/N]:

# Configure the mask length of the private network addresses of a branch as 23.

<Sysname> system-view

[Sysname] interface tunnel 0

[Sysname-Tunnel0] gre p2mp branch-network-mask 23

Warning: All tunnel table will be deleted. Continue? [Y/N]:

gre recursion

Use gre recursion to specify a value for the Recursion Control field in the GRE header.