interface tunnel

接口隧道<数字>

autogenerate peer

description

inter-tunnel-flooding

IP

access group in

地址{内部|池tunnel-pool <池名称> |{ }}

ospf

区域<区域ID>

authentication message-digest

费用

dead-interval

hello-interval

消息挖掘 - 键

priority

retransmit-interval

transmit-delay

IPv6地址X：X：X：X :: X

mtu

不...

敞开式启用

关闭

值得信赖[vlan add |remove |]

隧道

目标 | {ipv6 }

keepalive icmp

keepalive cisco | {<间断> }

mode gre {ip|ipv6|}

source

controller-ip

ipv6 {controller-ip | loopback | {vlan } | }

循环背

vlan

vlan添加 |删除 |

描述

此命令在一个之间配置第2层或3层GRE隧道managed deviceand another GRE-capable device. The default is an IPv4 Layer-3 GRE tunnel (隧道模式GRE IP）。

In Layer-3 GRE tunnels, IPv6 encapsulated in IPv4 and IPv4 encapsulated in IPv6 are not supported. The only Layer-3 GRE modes supported are IPv4 encapsulated in IPv4 and IPv6 encapsulated in IPv6.

您可以使用静态路线（通过将隧道指定为静态路线的下一个跳跃）或基于会话的ACL将交通引入隧道。

Parameter

描述

<数字>

Tunnel Identification number.

这里使用的隧道ID不必匹配另一个使用的隧道IDmanaged device.

范围：1-16777215

autogenerate peer

自动为指定的对等设备生成隧道端点。

description

String that describes this tunnel.

inter-tunnel-flooding

启用肺间洪水。

Default:Enabled

IP访问组

将路由ACL连接到L3 GRE隧道界面。

当您将路由ACL与A上的入站流量相关联managed deviceterminating a L3 GRE tunnel, that ACL can forward traffic as normal, route traffic to a nexthop router on a nexthop list, or redirect traffic over an L3 GRE tunnel or tunnel group. For more information on creating a routing ACL, seeIP访问列表路线.

IP地址{内部|池隧道池 | { }}}

第3层隧道的IP地址。这代表隧道的入口。

笔记：该地址应该是独特的，不可用的IP地址。

输入以下值之一：

  • 内部：IP地址是从远程节点池分配的。
  • 池隧道池：从指定的隧道池分配IP地址。
  • : An IPv4 address.

笔记：IP地址不应该任何子网的一部分your network, nor does it have to be routable in your network. It is used as a gateway for routing your private subnets (i.e., non-routable VLANs) within the GRE tunnel.

  • : IP subnet mask.

IPv6

IPv6 address of the Layer-3 GRE tunnel.

笔记：This IP address can be configured only for a Layer-3 GRE tunnel (refer to the "mode gre“以下参数以获取详细信息）。

mtu

MTU size for the interface.

范围：1024-9216

Default:Enabled, IPv4: 1100, IPv6: 1500

不

否定任何配置的参数。

敞开式启用

在隧道上启用开放流。

Default:Disabled

关闭

Causes a hard shutdown of the interface.

值得信赖[vlan {add }|{remove }|]

启用信任后:
Any device can send any traffic through the GRE tunnel without having to be authenticated. Trusted VLANs are supported on a single Layer-2 GRE tunnel.

利用vlan添加将VLAN添加到当前受信任的列表中。

Default:Disabled

笔记：表示VLAN范围。

利用vlan remove to remove VLANs from the current trusted list.

笔记：表示VLAN范围。

When Trusted is disabled:
Any device that is a source of traffic and is sent through the tunnel must be authenticated to be able to send the traffic. If the device is not authenticated, traffic from that device will be subject to the restrictions of the Initial Role specified in the Wired Access AAA Profile. This is the default. Untrusted VLANs are supported on a single Layer-2 GRE tunnel.

For related information, seeaaa authentication wired.

隧道

配置隧道。默认值是IPv4层3 GRE隧道。

Default:模式GRE IP

目标 | {ipv6 }

这destination IP address (IPv4 or IPv6) for the GRE tunnel endpoint.

keepalive icmp

Enables sending periodic ICMP (ping) keepalive frames on the tunnel to determine the status of the tunnel (up or down).

Default:Disabled

IP address of the ping destination.

Router IP address belonging to any of the L2 GRE tunnel -vlans . This parameter is mandatory only for L2 GRE tunnel.

Default:Disabled

keepalive cisco | {<间断> }

启用隧道上的周期性内部框架来确定隧道状态（向上或向下）。

您可以选择设置发送内存框架的间隔，并在隧道被认为是倒下之前的框架的次数。

Default:Disabled

笔记：Executing the不隧道保存命令禁用守护帧，但保留了配置的间隔和重试值。

<cisco> option enables keepalive interoperability for Layer-3 tunnels between托管设备and Cisco network devices.Aruba将Keepalive数据包的GRE协议字段设置为0x801；但是，思科将GRE协议字段设置为0。ciscooption is enabled, theArubamanaged deviceautomatically sets the GRE protocol value to 0.

这option sets the number of seconds at which the keepalive frames are sent. Range is 1 second to 86400 seconds and default is 10 seconds.

这选项设置了在认为隧道被视为关闭之前的连续次数。范围是0到1024，默认值为3。

mode gre {ip|ipv6|}

This parameter specifies the tunnel encapsulation method asGREand allows you to specify whether it is a Layer-2 or Layer-3 GRE tunnel.

IP：指定IPv4层3 GRE隧道。协议编号设置为0x0800and is not configurable. Traffic is redirected into the tunnel using a static route or a session ACL policy. Themanaged deviceencapsulates the Layer-3 packet only.

IPv6: Specifies an IPv6 Layer-3 GRE tunnel. The protocol number is set to0x86DDand is not configurable. Traffic is redirected into the tunnel using a static route or a session ACL policy. Themanaged deviceencapsulates the Layer-3 packet only.

：一个唯一标识GRE隧道的16位协议号。数字格式为数字。这托管设备at both endpoints of the tunnel must be configured with the same protocol number. The protocol number does not necessarily have to match the protocol number of the encapsulated frame. Themanaged deviceencapsulates the entire frame, including the Layer-2 header.

source

controller-ip

ipv6 {controller-ip | loopback | {vlan } | }

循环背

{vlan }

这local endpoint of the tunnel on thecontroller. This can be one of the following:

controller-ip: IPv4 address of themanaged device.

IPv6: Specify one of the following IPv6 options:

  • controller-ip: Specify the IPv6 address of themanaged device.
  • 循环背: Specify the IPv6 loopback interface configured on themanaged device.
  • vlan : Specify the VLAN interface ID.
  • ：指定IPv6地址。
  • loopback：指定在managed device.
  • vlan : Specify the VLAN interface ID.
  • ：指定一个IPv4地址。

vlan {add |删除 | }

Specify the VLANs to be included in this tunnel.

  • add : The VLANs to be added to the current list. Separate the VLANs by a comma (,)
  • remove : The VLANs to be removed from the current list. Separate the VLANs by a comma (,)
  • : The VLANs that should be part of the current list. Separate the VLANs by a comma (,)

笔记：您只有在将隧道模式设置为第2层时才能配置VLAN（mode gre <16位协议编号>）。如果未将隧道模式设置为第2层模式，则系统将显示错误消息：隧道是IP [V6] GRE隧道。在添加之前更改模式.

例子

第2层GRE隧道

这following CLI command configures a Layer-2 GRE tunnel:

MN-1配置

(host) [mynode] (config)# interface tunnel 101

描述“ IPv4层2 GRE 101”

隧道模式GRE 1

隧道source vlan 101

隧道目的地192.168.1.1

隧道保存

值得信赖

隧道vlan 101

值得信赖的VLAN 101

MN-2 Configuration

(host) [mynode] (config)# interface tunnel 201

描述“ IPv4层GRE 201”

隧道模式GRE 1

隧道source vlan 201

隧道目的地192.168.2.1

隧道保存

值得信赖

隧道vlan 201

值得信赖vlan 201

IPv4 Layer-3 GRE Tunnel

以下CLI命令示例配置了两个在两个之间的IPv4的GRE隧道托管设备.

MN-1配置

(MN-1) (host) [mynode] (config) #interface tunnel 301

(host) [mynode] (config-submode) #description “IPv4 L3 GRE 301"

（主机）[myNode]（config-submode）#tunnel模式GRE IP

（主机）[myNode]（config-submode）#ip地址192.1.1.1 255.255.255.255

（主机）[myNode]（config-submode）#tunnel源VLAN 301

（主机）[myNode]（config-submode）#tunnel目标20.20.20.249

（主机）[myNode]（config-submode）#tunnel VLAN 301

（主机）[myNode]（config-submode）#matusted VLAN 301

MN-2 Configuration

(MN-2) (host) [mynode] (config) #interface tunnel 401

（主机）[myNode]（config-submode）#description“ ipv4 l3 gre 401”

（主机）[myNode]（config-submode）#tunnel模式GRE IP

（主机）[myNode]（config-submode）#ip地址168.1.1.2 255.255.255.255

(host) [mynode] (config-submode) #tunnel source vlan 401

(host) [mynode] (config-submode) #tunnel destination 10.10.10.249

（主机）[myNode]（config-submode）#tunnel vlan 401

（主机）[myNode]（config-submode）#matusted VLAN 401

IPv6 Layer-3 GRE Tunnel

以下CLI命令示例配置了两个在两个之间的IPv6的GRE隧道托管设备.

MN-1配置

（MN-1）（主机）[myNode]（config）#interface隧道501

(host) [mynode] (config-submode) #description “IPv6 Layer-3 GRE 501"

（主机）[myNode]（config-submode）#tunnel模式GRE IPv6

（主机）[myNode]（config-submode）#ip地址2001：1：2：1 :: 1 :: 1

（主机）[myNode]（config-submode）#tunnel源VLAN 501

(host) [mynode] (config-submode) #tunnel destination 2001:1:2:2020::1

（主机）[myNode]（config-submode）#tunnel VLAN 501

(host) [mynode] (config-submode) #trusted vlan 501

MN-2 Configuration

（MN-2）（主机）[myNode]（config）#interface隧道601

（主机）[myNode]（config-submode）#description“ ipv6 layer-3 gre 601”

（主机）[myNode]（config-submode）#tunnel模式GRE IPv6

（主机）[myNode]（config-submode）#ip地址2001：1：2：1 :: 2

(host) [mynode] (config-submode) #tunnel source vlan 601

（主机）[myNode]（config-submode）#tunnel目标2001：1：2：1010 :: 1

（主机）[myNode]（config-submode）#tunnel vlan 601

(host) [mynode] (config-submode) #trusted vlan 601

Command History

发布

修改

阿鲁巴斯8.5.0.0

这keepalive icmp 引入了参数。

阿鲁巴斯8.4.0.0

Added the optional sub-parametersvlan {add }|{remove }|到值得信赖parameter.

阿鲁巴斯8.2.0.0

Updated the new syntax asaccess group in .

阿鲁巴斯8.0.0.0

Command introduced.

Command Information

平台

执照

命令模式

所有平台

Base operating system.

Config mode on移动导体.