R3721-F3210-F3171-HP High-End Firewalls VPN Command Reference-6PW101
5
Default level
2: System level
Parameters
mask: Mask of the private network IP addresses of the branch, in dotted decimal notation.
mask-length: Mask length of the private network IP addresses of the branch, in the range of 0 to 32.
Description
Use gre p2mp branch-network-mask to configure the mask or mask length of the private network
addresses of a branch in tunnel entries.
Use undo gre p2mp branch-network-mask to restore the default.
By default, the mask of the private network addresses of a branch is 255.255.255.255, and the mask
length is 32.
After you configure a mask length with this command, the node at the headquarters establishes only one
tunnel entry for private IP addresses in the same network segment, thus reducing the number of tunnel
entries on the node at the headquarters and allowing branches to initiate establishment of tunnels by
sending emulated data to the node at the headquarters.
This command is available for only P2MP GRE tunnel interfaces.
Modifying the mask will delete all tunnel entries created on the firewall. Therefore, execution of this
command needs your confirmation.
To use this command, make sure that all the branch networks of the enterprise have the same mask length;
otherwise, packet forwarding errors may occur. For a branch device with a different mask length, you
can configure NAT to make sure that after address translation the mask length of the branch meets the
consistency requirement.
Examples
# Configure the mask of the private network addresses of a branch as 255.255.255.0.
<Sysname> system-view
[Sysname] interface tunnel 0
[Sysname-Tunnel0] gre p2mp branch-network-mask 255.255.255.0
Warning: All tunnel table will be deleted. Continue? [Y/N]:
# Configure the mask length of the private network addresses of a branch as 23.
<Sysname> system-view
[Sysname] interface tunnel 0
[Sysname-Tunnel0] gre p2mp branch-network-mask 23
Warning: All tunnel table will be deleted. Continue? [Y/N]:
keepalive
Syntax
keepalive [ seconds [ times ] ]
undo keepalive
View
Tunnel interface view