cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
331
Views
0
Helpful
1
Replies

GRE tunnel issue

Earthwarder
Level 1
Level 1

Greetings, 

I am trying to get gre tunnel working and eventually with ipsec. My problem is that I cannot get the gre tunnel working. I believe my configurations to be correct. I have EIRGP neighbor adjacency among the other prerequisites configured and I am a little stumped. I think it might be a fairly obvious solution, but I am just not seeing it. Please give me a hand and if I missed some information here to post, let me know. I am not certain if google drive links work here since the attachments do not for .pkt's but here is the packet tracer that I'm referring too

 

Many thanks in advance!

note: both routers are ISR4321's

 

Router 1

!
version 15.4
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname isp
!
!
!
!
!
!
!
!
no ip cef
no ipv6 cef
!
!
!
!
!
!
!
!
!
!
!
!
spanning-tree mode pvst
!
!
!
!
!
!
interface Loopback0
 ip address 192.168.7.1 255.255.255.0
!
interface Tunnel1
 ip address 100.100.100.2 255.255.255.252
 mtu 1476
 tunnel source Serial0/2/1
 tunnel destination 2.2.2.2
!
!
interface GigabitEthernet0/0/0
 no ip address
 duplex auto
 speed auto
 shutdown
!
interface GigabitEthernet0/0/1
 no ip address
 duplex auto
 speed auto
 shutdown
!
interface Serial0/1/0
 ip address 192.168.4.1 255.255.255.252
 ip nat inside
!
interface Serial0/1/1
 ip address 192.168.4.5 255.255.255.252
 ip nat inside
!
interface Serial0/2/0
 ip address 192.168.4.9 255.255.255.252
!
interface Serial0/2/1
 ip address 192.168.4.13 255.255.255.252
!
interface Vlan1
 no ip address
 shutdown
!
router eigrp 1
 network 192.168.4.0
 network 192.168.5.0
 network 192.168.3.0
 network 192.168.2.0
 network 192.168.1.0
 network 100.0.0.0
 
!
ip nat pool INTERNET 211.1.1.1 211.1.1.30 netmask 255.255.255.224
ip nat inside source list 10 pool INTERNET overload
ip classless
ip route 192.168.3.0 255.255.255.0 192.168.4.6 
ip route 192.168.1.0 255.255.255.0 200.1.1.2 
ip route 192.168.1.0 255.255.255.0 192.168.4.10 
ip route 192.168.2.0 255.255.255.0 192.168.4.2 
ip route 192.168.5.0 255.255.255.252 192.168.4.14 
ip route 192.168.6.0 255.255.255.0 192.168.4.14 
!
ip flow-export version 9
!
!
access-list 10 permit 192.168.0.0 0.0.255.255
ip access-list extended LAN_Traffic
 permit tcp any host 192.168.1.34 eq smtp
 permit ip any any
ip access-list extended IT_Traffic
 deny ip any 192.168.1.56 0.0.0.7
 permit ip any any
ip access-list extended Sales_Traffic
 permit ip any 0.0.0.0 255.255.255.63
 deny ip any 192.168.0.0 0.0.255.255
 permit ip any any
ip access-list extended INTERNET
 permit tcp any any eq www
!
!
!
!
!
!
line con 0
!
line aux 0
!
line vty 0 4
 login
!
!
!
end

 

Router 2

!
version 15.4
no service timestamps log datetime msec
no service timestamps debug datetime msec
no service password-encryption
!
hostname Router
!
!
!
!
!
!
!
!
no ip cef
no ipv6 cef
!
!
!
!
!
!
!
!
!
!
!
!
spanning-tree mode pvst
!
!
!
!
!
!
interface Loopback0
 ip address 192.168.7.2 255.255.255.0
!
interface Tunnel1
 ip address 100.100.100.1 255.255.255.252
 mtu 1476
 tunnel destination 1.1.1.1
!
!
interface GigabitEthernet0/0/0
 ip address 192.168.6.1 255.255.255.0
 duplex auto
 speed auto
!
interface GigabitEthernet0/0/1
 no ip address
 duplex auto
 speed auto
 shutdown
!
interface Serial0/1/0
 ip address 192.168.5.2 255.255.255.0
 clock rate 2000000
!
interface Serial0/1/1
 no ip address
 clock rate 2000000
 shutdown
!
interface Serial0/2/0
 no ip address
 clock rate 2000000
 shutdown
!
interface Serial0/2/1
 no ip address
 clock rate 2000000
 shutdown
!
interface Vlan1
 no ip address
 shutdown
!
router eigrp 1
 network 192.168.4.0
 network 192.168.5.0
 network 100.0.0.0
 
!
ip classless
ip route 0.0.0.0 0.0.0.0 Serial0/1/0 
ip route 0.0.0.0 0.0.0.0 192.168.5.1 
!
ip flow-export version 9
!
!
!
!
!
!
!
!
line con 0
!
line aux 0
!
line vty 0 4
 login
!
!
!
end

 

1 Reply 1

What is the common subnet that connects both routers (if there is one) ? Your tunnel destinations need to be an IP address configured on the respective other side of the tunnel. It should look like below:

 

R1

 

interface Serial0/2/1
ip address 192.168.4.13 255.255.255.252

!

interface Tunnel1
ip address 100.100.100.2 255.255.255.252
mtu 1476
tunnel source Serial0/2/1
tunnel destination 192.168.4.14

R2

 

interface Serial0/2/1
ip address 192.168.4.14 255.255.255.252

!

interface Tunnel1
ip address 100.100.100.1 255.255.255.252
mtu 1476

tunnel source Serial0/2/1
tunnel destination 192.168..4.13

Review Cisco Networking products for a $25 gift card