R3721-F3210-F3171-HP High-End Firewalls VPN Configuration Guide-6PW101

11
Ste
p
Command Remarks
9. Configure the key for the GRE
tunnel interface.
gre key key-number
Optional.
By default, no key is configured for a GRE
tunnel interface.
The two ends of a tunnel must have the same
key or have no key at the same time.
10. Configure a route for packet
forwarding through the
tunnel.
See Network
Management
Configuration Guide
Each end of the tunnel must have a route
(static or dynamic) through the tunnel to the
other end.
11. Return to system view.
quit N/A
12. Configure the firewall to
discard the IPv4-compatible
IPv6 packets.
tunnel discard
ipv4-compatible-packet
Optional.
By default, the firewall does not discard the
IPv4-compatible IPv6 packets.
NOTE:
For information tunnel interfaces and more configuration commands in a tunnel interface, see
"Configuring tunneling."
GRE over IPv4 tunnel configuration example at the CLI
NOTE:
In this configuration example, either Router A or Router B is the firewall.
Network requirements
Router A and Router B are interconnected through the Internet. Two private IPv4 subnets Group 1 and
Group 2 are interconnected through a GRE tunnel between the two routers.
Figure 14 Network diagram
Configuration procedure
Before the configuration, make sure Router A and Router B can reach each other.
1. Configure Router A:
# Configure an IPv4 address for interface GigabitEthernet 0/1.
<RouterA> system-view
[RouterA] interface gigabitethernet 0/1
[RouterA-GigabitEthernet0/1] ip address 10.1.1.1 255.255.255.0
[RouterA-GigabitEthernet0/1] quit
# Configure an IPv4 address for interface GigabitEthernet 0/2, the physical interface of the tunnel.
[RouterA] interface gigabitethernet 0/2
[RouterA-GigabitEthernet0/2] ip address 1.1.1.1 255.255.255.0