TMS zl Management and Configuration Guide ST.1.0.090213

A-42
Threat Management Services zl Module Command-Line Reference
Global Configuration Context
gre
With this command you can create GRE tunnels and their associated traffic
selectors.
To configure a GRE tunnel, enter the following command:
Syntax: [no] gre <tunnel name> tunnel <tunnel IP address> <zone> <local IP address>
<remote IP address> [disable]
Replace <tunnel name> with type a character string that is unique for this
tunnel. It is recommended that you use a name that indicates the destination
of the tunnel.
Replace <tunnel IP address> with the private network address that will be
the source address for tunneled packets
Replace <zone> with the firewall zone associated with this tunnel.
Replace <local IP address> with an IP address on the TMS zl Module that
the remote tunnel endpoint can reach.
Replace <remote IP address> with type the public IP address of the tunnel’s
remote endpoint.
To add a traffic selector to an existing GRE tunnel, enter the following
command:
Syntax: [no] gre <tunnel name> selector <selector IP address> <mask>
Replace <tunnel name> with type a character string that is unique for this
tunnel. It is recommended that you use a name that indicates the destination
of the tunnel.
Replace <selector IP address> and <mask> with the network IP address
and subnet mask of the destination subnet for this tunnel.
Tunnels are enabled by default, but if a tunnel is disabled, you can enable it
by entering the following command:
Syntax: gre <tunnel name> enable
Replace <tunnel name> with type a character string that is unique for this
tunnel. It is recommended that you use a name that indicates the destination
of the tunnel.