R3721-F3210-F3171-HP High-End Firewalls VPN Configuration Guide-6PW101

i
Contents
Configuring GRE ·························································································································································· 1
Overview ············································································································································································ 1
GRE encapsulation format ······································································································································· 1
GRE encapsulation and de-encapsulation processes ··························································································· 2
GRE security options ················································································································································ 2
GRE applications ······················································································································································ 3
Protocols and standards ·········································································································································· 4
Configuring a GRE over IPv4 tunnel ······························································································································· 4
Configuring a GRE over IPv4 tunnel in the web interface ··················································································· 4
GRE over IPv4 tunnel configuration example in the web interface ····································································· 6
Configuring a GRE over IPv4 tunnel at the CLI ····································································································· 9
GRE over IPv4 tunnel configuration example at the CLI ···················································································· 11
Configuring a GRE over IPv6 tunnel ···························································································································· 14
Configuration guidelines ······································································································································ 14
Configuration prerequisites ·································································································································· 14
Configuration procedure ······································································································································ 15
GRE over IPv6 tunnel configuration example ····································································································· 16
Displaying and maintaining GRE ································································································································· 19
Troubleshooting GRE ····················································································································································· 19
Configuring a point to multi-point GRE tunnel ········································································································· 20
P2MP GRE tunnel overview ··········································································································································· 20
Operation of the P2MP GRE tunnel ····················································································································· 20
P2MP GRE tunnel backup ····································································································································· 22
Advantages and restrictions of the P2MP GRE tunnel technology ··································································· 23
Configuring a P2MP GRE tunnel in the web interface ······························································································· 24
Configuration prerequisites ··········································································································································· 24
Configuration task list ··········································································································································· 24
Configuring a P2MP GRE tunnel interface ········································································································· 25
Displaying information about established P2MP GRE tunnels·········································································· 26
Basic P2MP GRE tunnel configuration example ································································································· 27
Configuration example for P2MP GRE tunnel backup at the headquarters ···················································· 31
Configuration example for P2MP GRE tunnel backup at a branch ································································· 41
Configuring a P2MP GRE tunnel at the CLI ················································································································· 47
Configuration guidelines ······································································································································ 47
Configuration prerequisites ·································································································································· 47
Configuration procedure ······································································································································ 47
Displaying and maintaining P2MP GRE tunnels ········································································································· 49
Basic P2MP GRE tunnel configuration example ································································································· 49
Configuration example for P2MP GRE tunnel backup at the headquarters ···················································· 51
Configuration example for P2MP GRE tunnel backup at a branch ································································· 55
Configuring AFT ························································································································································· 58
Overview ········································································································································································· 58
Application scenario ············································································································································· 58
Basic concepts ······················································································································································· 58
AFT modes ····························································································································································· 59
AFT operation ························································································································································ 60
DNS64 function ····················································································································································· 62
AFT limitations ························································································································································ 62