Setting Up Generic Routing Encapsulation (Gre) Tunnels - HP 7102dl - ProCurve Secure Router Configuration Manual

Using the Web Browser Interface for Advanced Configuration Tasks

Setting Up Generic Routing Encapsulation (GRE) Tunnels

16-136
b. Return to the CA Profiles window in the Web browser interface. Move
to the Step 4 of 4 (optional): Enter/Upload a Certificate Revocation
List window. You have two options for loading the CRL:
– If you copied the CRL, select the Paste circle and paste the CRL
into the field below. Click Import CRL.
– If you downloaded the CRL to a file, choose the Select circle. Then
either enter the filename in the field below or click Browse and
open the file.
Setting Up Generic Routing
Encapsulation (GRE) Tunnels
The ProCurve Secure Router supports tunneling using Generic Routing
Encapsulation (GRE).
GRE is a Layer 2 protocol that encapsulates higher-level protocols and renders
them transparent. Routers use GRE to send traffic through an intervening
network that does not support such traffic.
For example, the Internet does not route multicast messages. However, many
routing protocols rely on multicasts. You can use GRE tunnels to send multi-
cast routing updates through the Internet. This application is commonly used
as an overlay with a VPN established using IPSec. You can also tunnel non-IP
traffic through the Internet.
You can use GRE tunnels to establish a private connection through a public
network like the Internet. However, this connection would not be secure in
the way that an IPSec VPN would be.
To configure a tunnel using GRE, follow these steps:
1. Select GRE Tunnels under Router/Bridge in the navigation bar.
2. In the Tunnel Interfaces window, click the Add New Tunnel button.
3. Before further configuring the tunnel, you should determine the tunnel's
IP address, its source, and its destination. The tunnel's IP address and its
source may be the same, but often they should not be. For example, when
you tunnel private traffic through a public network such as the Internet,
tunnel's IP address is on a private network, but its source is a public IP
address.