Tunnel Key-Ignore - Cisco ASR 9000 Series Reference Manual

Generic Routing Encapsulation Commands

tunnel key-ignore

To ensure that the decapsulation router skips GRE key validation before accepting the packet, use the tunnel
key-ignore command. To remove the tunnel key ignore feature, use the no form of this command.

tunnel key-ignore

no tunnel key-ignore
Syntax Description
This command has no keywords or arguments.
Command Default
Tunnel key-ignore is disabled.
Command Modes
interface configuration
Command History
Release
Release 5.1.1
Usage Guidelines
To use this command, you must be in a user group associated with a task group that includes appropriate task
IDs. If the user group assignment is preventing you from using a command, contact your AAA administrator
for assistance.
Do not configure any key value under GRE tunnel that has tunnel key-ignore feature enabled. This is because
the configured tunnel key overrides the tunnel key-ignore feature. As a result, packets that arrive with configured
key value are accepted and undergo further processing at the decapsulation router, while the remaining packets
without the key value are dropped.
Task ID
Task ID
interface
tunnel
Examples
This example shows how to configure the tunnel key-ignore feature at the GRE transmitter and receiver ends:
!Local GRE Interface
RP/0/RSP0/CPU0:router# configure
RP/0/RSP0/CPU0:router(config)# interface tunnel-ip 10
RP/0/RSP0/CPU0:router(config-if)#ipv4 address 101.0.9.1 255.255.255.0
RP/0/RSP0/CPU0:router(config-if)# tunnel key-ignore
RP/0/RSP0/CPU0:router(config-if)# tunnel tos 96
RP/0/RSP0/CPU0:router(config-if)# tunnel source Loopback10
RP/0/RSP0/CPU0:router(config-if)# tunnel destination 33.0.9.33
Cisco ASR 9000 Series Aggregation Services Router VPN and Ethernet Services Command Reference, Release
Modification
This command was introduced.
Operation
read, write
read, write
tunnel key-ignore
6.1.x
47