Configuring a GRE tunnel

Configuring a GRE tunnel involves the following items:

Required configuration items

Additional configuration items

Task One: Create a GRE loopback endpoint interface

 

  1. Log into Digi Remote Manager, or log into the local Web UI as a user with full Admin access rights.
  2. Access the device configuration:

    1. Locate your device as described in Use Digi Remote Manager to view and manage your device.
    2. Click the Device ID.
    3. Click Settings.
    4. Click to expand Config.

    1. On the menu, click System. Under Configuration, click Device Configuration.

      The Configuration window is displayed.

  3. Click Network > Interfaces.
  4. For Add Interface, type a name for the GRE loopback endpoint interface and click .
  5. Enable the interface.

    New interfaces are enabled by default. To disable, toggle off Enable.

  6. For Interface type, select Ethernet.
  7. For Zone, select Internal.
  8. For Device, select Ethernet: Loopback.
  9. Click to expand IPv4.
  10. For Address, enter the IP address and subnet mask of the local GRE endpoint, for example 10.10.1.1/24.
  11. Click Apply to save the configuration and apply the change.
  1. Select the device in Remote Manager and click Actions > Open Console, or log into the EX15 local command line as a user with full Admin access rights.

    Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.

  2. At the command line, type config to enter configuration mode:

    > config
(config)>

  3. Add the GRE endpoint interface. For example, to add an interface named gre_endpoint:
    (config)> add network interface gre_interface
(config network interface gre_interface)>
  4. Set the interface zone to internal:
    (config network interface gre_interface)> zone internal
(config network interface gre_interface)>
  5. Set the interface device to loopback:
    (config network interface gre_interface)> device /network/device/loopback
(config network interface gre_interface)>
  6. Set the IP address and subnet mask of the local GRE endpoint. For example, to set the local GRE endpoint's IP address and subnet mask to 10.10.1.1/24:
    (config network interface gre_interface)> ipv4 address 10.10.1.1/24
(config network interface gre_interface)>
  7. Save the configuration and apply the change.
    (config network interface gre_interface)> save
Configuration saved.
>
  8. Type exit to exit the Admin CLI.

    Depending on your device configuration, you may be presented with an Access selection menu. Type quit to disconnect from the device.

Task Two: Configure the GRE tunnel

 

  1. Log into Digi Remote Manager, or log into the local Web UI as a user with full Admin access rights.
  2. Access the device configuration:

    1. Locate your device as described in Use Digi Remote Manager to view and manage your device.
    2. Click the Device ID.
    3. Click Settings.
    4. Click to expand Config.

    1. On the menu, click System. Under Configuration, click Device Configuration.

      The Configuration window is displayed.

  3. Click VPN > IP Tunnels.
  4. For Add IP tunnel, type a name for the GRE tunnel and click .
  5. Enable the tunnel.

    New tunnels are enabled by default. To disable, toggle off Enable.

  6. For Mode, select one of the following options:
    • GRE: Standard GRE point-to-point protocol.
    • mGRE: multipoint GRE protocol.
    • GRETAP: Ethernet over GRE.
  7. For Local endpoint, select the GRE endpoint interface created in Task One.
  8. If GRE is selected for the Mode, for Remote endpoint, type the IP address of the GRE endpoint on the remote peer.
  9. If GRETAP is selected for Mode, for Local endpoint, select the interface.
  10. (Optional) For Key, enter a key that will be inserted in GRE packets created by this tunnel. It must match the key set by the remote endpoint. Allowed value is an integer between 0 and 4294967295, or an IP address.
  11. (Optional) Enable keepalive reply to enable the device to reply to Cisco GRE keepalive packets.
  12. (Optional) Enable open routing to enable packets destined for an address which is not explicitly in the routing table to exit the IP tunnel.
  13. Click Apply to save the configuration and apply the change.
  1. Select the device in Remote Manager and click Actions > Open Console, or log into the EX15 local command line as a user with full Admin access rights.

    Depending on your device configuration, you may be presented with an Access selection menu. Type admin to access the Admin CLI.

  2. At the command line, type config to enter configuration mode:

    > config
(config)>

  3. Add the GRE endpoint tunnel. For example, to add a tunnel named gre_example:
    (config)> add vpn iptunnel gre_example
(config vpn iptunnel gre_example)>

    GRE tunnels are enabled by default. To disable:

    (config vpn iptunnel gre_example)> enable false
(config vpn iptunnel gre_example)>

  4. Set the mode:
    (config vpn iptunnel gre_example)> type value
(config vpn iptunnel gre_example)>

    where value is either:

    • gre: Standard GRE point-to-point protocol.
    • mgre: multipoint GRE protocol.
    • GRETAP: Ethernet over GRE

  5. Set the local endpoint to the GRE endpoint interface created in Task One, for example:
    (config vpn iptunnel gre_example)> local /network/interface/gre_endpoint
(config vpn iptunnel gre_example)>
  6. If type is set to gre, set the IP address of the GRE endpoint on the remote peer:
    (config vpn iptunnel gre_example)> remote ip_address
(config vpn iptunnel gre_example)>

  7. The key must match the key set by the remote endpoint.

    (config vpn iptunnel gre_example)> key value
(config vpn iptunnel gre_example)>

    where value is an integer between 0 and 4294967295, or an IP address.

  8. (config vpn iptunnel gre_example)> keepalive true
(config vpn iptunnel gre_example)>
  9. (config vpn iptunnel gre_example)> open_routing true
(config vpn iptunnel gre_example)>
  10. Save the configuration and apply the change.
    (config vpn iptunnel gre_example)> save
Configuration saved.
>
  11. Type exit to exit the Admin CLI.

    Depending on your device configuration, you may be presented with an Access selection menu. Type quit to disconnect from the device.