3Com Switch 8800 Family IPsec Module Configuration and Command reference Guide

140 CHAPTER 9: CONFIGURATION OF GRE

[secblade_B] interface g0/0.2

[secblade_B-GigabitEthernet0/0.2] vlan-type dot1q vid 60

[secblade_B-GigabitEthernet0/0.2] ip address 60.0.0.1 24

[secblade_B-GigabitEthernet0/0.2] quit

# Create the Tunnel interface.

[secblade_B] interface Tunnel 0

# Configure the Tunnel IP address.

[secblade_B-Tunnel0] ip address 100.0.0.2 24

# Configure Tunnel encapsulation mode.

[secblade_B-Tunnel0] tunnel-protocol gre

# Configure the source address of the Tunnel.

[secblade_B-Tunnel0] source 60.0.0.254

# Configure the destination address of the Tunnel.

[secblade_B-Tunnel0] destination 50.0.0.254

[secblade_B-Tunnel0] quit

# Add the virtual interface to the Trust zone (applicable to only the firewall card).

[secblade_A] firewall zone untrust

[secblade_A-zone-untrust] add interface tunnel 0

[secblade_A-zone-untrust] quit

# Configure the static route passing by the Tunnel.

[secblade_B] ip route-static 10.0.0.0 24 Tunnel 0

[secblade_B] ip route-static 20.0.0.0 24 40.0.0.1

[secblade_A] ip route-static 0.0.0.0 0 60.0.0.1

# Quit IPsec module configuration view.

[secblade_B] quit

<secblade_B> quit

[3Com_B]

GRE Troubleshooting GRE configuration is relatively simple, except that you should pay more attention

to the consistency. Most errors can be located by executing the debugging

tunnel command. Here, only one type of error is analyzed, as shown in the

following figure: