cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
473
Views
0
Helpful
4
Replies

GRE TUNNEL QUESTION

mohacsitibor
Level 1
Level 1

Hello! 
I have a question about gre tunnel. So i have this network, whats picture i uploaded here. So the gre tunnel is between 'R2' and 'KV'.
With the help of ACL-s, i want to deny all the packets coming in from private networks on 'HATAR'.  But when i do that, i can't ping from the top left to the bottom right. How can direct traffic on gre tunnel? 
I configured the tunnels:
R2:

int tunnel 5
ip address 192.168.140.1 255.255.255.252
tunnel source g0/0/1
tunnel destination 83.14.10.49
tunnel mode gre ip

KV

ip address 192.168.140.2 255.255.255.252
tunnel source g0/0/0
tunnel destination 83.14.10.33
tunnel mode gre ip

i also have configured ospf protocol for the full network, and i got the tunnels' network in the process

4 Replies 4

for ACL I dont get what you want 
for direct traffic toward GRE tunnel 
only use 
ip route x.x.x.x y.y.y.y tunnel Z <<- tunnel Z direct traffic to tunnel 

So ACL: I want to deny all private network addresses to come in on 'HATAR' and i want to direct them to the gre tunnel
but if i make an extended acl and deny all private network addresses on 'HATAR', the traffic don't go through the tunnel
here is my packet tracer file: https://www.mediafire.com/file/8keiv6cc68is068/topology.pkt/file

but the tunnel pass through  HATAR?

anyway as I mention, you need  static route toward tunnel, what you concern here is destination not source.
only config static route for destination (traffic must pass through tunnel ) and that it.
traffic will pass through tunnel.

The tunnel is between R2 and KV
i'll try it, thank you