Configuring Routes For The Tunnel - Huawei quidway s7700 Configuration Manual

Quidway S7700 Smart Routing Switch
Configuration Guide - VPN
By default, the network address of a tunnel interface is not set.
----End

2.3.3 Configuring Routes for the Tunnel

Routes for a tunnel must be available on both the source and destination devices so that packets
encapsulated with GRE can be forwarded properly. A route passing through tunnel interfaces
can be a static route or a dynamic route.
Context
Do as follows on devices on two ends of a tunnel:
Procedure
Step 1 Run:
system-view
The system view is displayed.
Step 2 Choose one of the following methods to configure routes passing through the tunnel interface.
l Run the ip route-static ip-address { mask | mask-length } tunnel interface-number
l Configure dynamic routes using IGP or BGP. Details for the procedure are not provided here.
Issue 01 (2011-07-15)
NOTE
The packets encapsulated with GRE are forwarded correctly only if the routes for the tunnel are available
on both the source and destination switchs.
[ description text ] command to configure a static route.
The static route must be configured on both ends of the tunnel. In this command, the
destination address is neither the destination address of the tunnel nor the address of the
opposite tunnel interface, but the destination address of the packet that is not encapsulated
with GRE. The outbound interface must be the local tunnel interface.
For the configuration of dynamic routes, see the S7700 Configuration Guide - IP Routing.
When configuring a dynamic routing protocol, enable the dynamic routing protocol on both
the tunnel interface and the interface connected to the private network. To ensure proper
routing, do not choose the tunnel interface as the next hop when configuring the route to the
physical or logical interface of the destination tunnel.
Use Switch A in Figure 2-4
10 on Switch A, and its destination interface is VLANIF 20 on Switch C. If a dynamic routing
protocol is used, the protocol must be configured on the tunnel interface and the GE interface
connected to the PC. Moreover, in the routing table of Switch A, the egress with the
destination as the network segment where VLANIF 20 on Switch C resides cannot be Tunnel
1/0/1.
In practical configurations, tunnel interfaces and physical interfaces connected to the public
network should use different routing protocols or different processes of the same routing
protocol. In this manner, you can avoid selecting a tunnel interface as an outbound interface
for packets destined for the destination of the tunnel. In addition, a physical interface is
prevented from forwarding user packets that should be forwarded through the tunnel.
Huawei Proprietary and Confidential
Copyright © Huawei Technologies Co., Ltd.
as an example. The source interface of Tunnel 1/0/1 is VLANIF
2 GRE Configuration
63