R3721-F3210-F3171-HP High-End Firewalls VPN Configuration Guide-6PW101

[RouterA-GigabitEthernet0/2] quit

# Create a tunnel interface Tunnel0.

[RouterA] interface tunnel 0

# Configure an IPv4 address for interface Tunnel0.

[RouterA-Tunnel0] ip address 10.1.2.1 255.255.255.0

# Configure the tunnel encapsulation mode as GRE over IPv4.

[RouterA-Tunnel0] tunnel-protocol gre

# Configure the source address of interface Tunnel0 to be the IP address of GigabitEthernet 0/2.

[RouterA-Tunnel0] source 1.1.1.1

# Configure the destination address of interface Tunnel0 to be the IP address of GigabitEthernet 0/2 on

Router B.

[RouterA-Tunnel0] destination 2.2.2.2

[RouterA-Tunnel0] quit

# Configure a static route from Router A through interface Tunnel0 to Group 2.

[RouterA] ip route-static 10.1.3.0 255.255.255.0 tunnel 0

2. Configure Router B:

# Configure an IPv4 address for interface GigabitEthernet 0/1.

<RouterB> system-view

[RouterB] interface gigabitethernet 0/1

[RouterB-GigabitEthernet0/1] ip address 10.1.3.1 255.255.255.0

[RouterB-GigabitEthernet0/1] quit

# Configure an IPv4 address for interface GigabitEthernet 0/2, the physical interface of the tunnel.

[RouterB] interface gigabitethernet 0/2

[RouterB-GigabitEthernet0/2] ip address 2.2.2.2 255.255.255.0

[RouterB-GigabitEthernet0/2] quit

# Create a tunnel interface Tunnel0.

[RouterB] interface tunnel 0

# Configure an IP address for interface Tunnel0.

[RouterB-Tunnel0] ip address 10.1.2.2 255.255.255.0

# Configure the tunnel encapsulation mode as GRE over IPv4.

[RouterB-Tunnel0] tunnel-protocol gre

# Configure the source address of interface Tunnel0 to be the IP address of interface GigabitEthernet

0/2.

[RouterB-Tunnel0] source 2.2.2.2

# Configure the destination address of interface Tunnel0 to be the IP address of interface GigabitEthernet

0/2 on Router A.

[RouterB-Tunnel0] destination 1.1.1.1

[RouterB-Tunnel0] quit

# Configure a static route from Router B through interface Tunnel0 to Group 1.

[RouterB] ip route-static 10.1.1.0 255.255.255.0 tunnel 0

3. Verify the configuration:

# Display the tunnel interface status on Router A and Router B.

[RouterA] display interface tunnel 0