tunnel allow-remote
Configure the remote IPv4 or IPv6 addresses whose tunneled packets are accepted for decapsulation. If
you do not configure an allow-remote address, tunneled packets from all remote peer addresses are
accepted.
Z9500
Syntax
tunnel allow-remote {ip-address | ipv6-address} [mask]
To delete a configured allow-remote entry, enter the no tunnel allow-remote
command and specify a configured IPv4/IPv6 address and mask value. If you enter
the no form of the command without an address and mask value, all configured
allow-remote entries are deleted.
Parameters
ip-address
ipv6–address
mask
Defaults
If you do not configure a tunnel allow-remote address, all traffic destined to
tunnel's source address is decapsulated.
Command
INTERFACE TUNNEL
Modes
Command
Version
History
9.5(0.1)
9.4(0.0)
9.3(0.1)
Usage
You can configure up to eight allow-remote entries on a multipoint receive-only
Information
tunnel.
This command fails if the address family entered does not match the outer header
address family of the tunnel mode, tunnel source, or any other tunnel allow-
remote address.
If you configure an allow-remote address, the tunnel source or tunnel mode
commands fail if the outer header address family does not match that of the
configured allow-remote address.
Tunneling
Enter the source IPv4 address in A.B.C.D format.
Enter the source IPv6 address in X:X:X:X::X format.
(OPTIONAL) Enter a network mask in /prefix format (/x) or
A.B.C.D to match a range of remote addresses. The default
mask is /32 for IPv4 addresses and /128 for IPv6 addresses,
which match only the specified address.
Description
Introduced on the Z9500.
Introduced on the S4810, S4820T, S6000 and Z9000.
Introduced on the S6000 and Z9000.
1805