HP VPN Firewall Appliances VPN Configuration Guide

11
Configuration procedure
To configure a GRE over IPv4 tunnel:
Ste
p
Command Remarks
1. Enter system view.
system-view N/A
2. Create a tunnel interface and
enter tunnel interface view.
interface tunnel
interface-number
By default, a device has no tunnel
interface.
3. Configure an IPv4 address for
the tunnel interface.
ip address ip-address { mask |
mask-length }
By default, a tunnel interface has
no IPv4 address.
4. Set the tunnel mode to GRE over
IPv4.
tunnel-protocol gre
Optional.
The default tunnel mode is GRE
over IPv4.
You must configure the same tunnel
mode on both ends of a tunnel.
Otherwise, packet delivery will
fail.
5. Configure the source address or
interface for the tunnel interface.
source { ip-address |
interface-type interface-number }
By default, no source address or
interface is configured for a tunnel
interface.
6. Configure the destination
address for the tunnel interface.
destination ip-address
By default, no destination address
is configured for a tunnel interface.
7. Enable GRE keepalive and set
the interval and the maximum
number of transmission
attempts.
keepalive [ seconds [ times ] ]
Optional.
Disabled by default.
8. Enable the GRE packet
checksum function.
gre checksum
Optional.
Disabled by default.
9. Configure the key for the GRE
tunnel interface.
gre key key-number
Optional.
By default, no key is configured for
a GRE tunnel interface.
The two ends of a tunnel must have
the same key or have no key at the
same time.
10. Specify a value for the Recursion
Control field in the GRE header.
gre recursion recursion-value
Optional.
By default, the value of the
Recursion Control field in the GRE
header is 0, which means not to
limit the number of encapsulations.
11. Configure a route for packet
forwarding through the tunnel.
For more information about
routing configuration, see
Network Management
Configuration Guide.
Each end of the tunnel must have a
route (static or dynamic) through
the tunnel to the other end.
12. Return to system view.
quit N/A