04-24-2019 02:02 AM - edited 04-26-2019 03:04 AM
Greetings,
I am trying to get gre tunnel working and eventually with ipsec. My problem is that I cannot get the gre tunnel working. I believe my configurations to be correct. I have EIRGP neighbor adjacency among the other prerequisites configured and I am a little stumped. I think it might be a fairly obvious solution, but I am just not seeing it. Please give me a hand and if I missed some information here to post, let me know. I am not certain if google drive links work here since the attachments do not for .pkt's but here is the packet tracer that I'm referring too
Many thanks in advance!
note: both routers are ISR4321's
Router 1
! version 15.4 no service timestamps log datetime msec no service timestamps debug datetime msec no service password-encryption ! hostname isp ! ! ! ! ! ! ! ! no ip cef no ipv6 cef ! ! ! ! ! ! ! ! ! ! ! ! spanning-tree mode pvst ! ! ! ! ! ! interface Loopback0 ip address 192.168.7.1 255.255.255.0 ! interface Tunnel1 ip address 100.100.100.2 255.255.255.252 mtu 1476 tunnel source Serial0/2/1 tunnel destination 2.2.2.2 ! ! interface GigabitEthernet0/0/0 no ip address duplex auto speed auto shutdown ! interface GigabitEthernet0/0/1 no ip address duplex auto speed auto shutdown ! interface Serial0/1/0 ip address 192.168.4.1 255.255.255.252 ip nat inside ! interface Serial0/1/1 ip address 192.168.4.5 255.255.255.252 ip nat inside ! interface Serial0/2/0 ip address 192.168.4.9 255.255.255.252 ! interface Serial0/2/1 ip address 192.168.4.13 255.255.255.252 ! interface Vlan1 no ip address shutdown ! router eigrp 1 network 192.168.4.0 network 192.168.5.0 network 192.168.3.0 network 192.168.2.0 network 192.168.1.0 network 100.0.0.0 ! ip nat pool INTERNET 211.1.1.1 211.1.1.30 netmask 255.255.255.224 ip nat inside source list 10 pool INTERNET overload ip classless ip route 192.168.3.0 255.255.255.0 192.168.4.6 ip route 192.168.1.0 255.255.255.0 200.1.1.2 ip route 192.168.1.0 255.255.255.0 192.168.4.10 ip route 192.168.2.0 255.255.255.0 192.168.4.2 ip route 192.168.5.0 255.255.255.252 192.168.4.14 ip route 192.168.6.0 255.255.255.0 192.168.4.14 ! ip flow-export version 9 ! ! access-list 10 permit 192.168.0.0 0.0.255.255 ip access-list extended LAN_Traffic permit tcp any host 192.168.1.34 eq smtp permit ip any any ip access-list extended IT_Traffic deny ip any 192.168.1.56 0.0.0.7 permit ip any any ip access-list extended Sales_Traffic permit ip any 0.0.0.0 255.255.255.63 deny ip any 192.168.0.0 0.0.255.255 permit ip any any ip access-list extended INTERNET permit tcp any any eq www ! ! ! ! ! ! line con 0 ! line aux 0 ! line vty 0 4 login ! ! ! end
Router 2
! version 15.4 no service timestamps log datetime msec no service timestamps debug datetime msec no service password-encryption ! hostname Router ! ! ! ! ! ! ! ! no ip cef no ipv6 cef ! ! ! ! ! ! ! ! ! ! ! ! spanning-tree mode pvst ! ! ! ! ! ! interface Loopback0 ip address 192.168.7.2 255.255.255.0 ! interface Tunnel1 ip address 100.100.100.1 255.255.255.252 mtu 1476 tunnel destination 1.1.1.1 ! ! interface GigabitEthernet0/0/0 ip address 192.168.6.1 255.255.255.0 duplex auto speed auto ! interface GigabitEthernet0/0/1 no ip address duplex auto speed auto shutdown ! interface Serial0/1/0 ip address 192.168.5.2 255.255.255.0 clock rate 2000000 ! interface Serial0/1/1 no ip address clock rate 2000000 shutdown ! interface Serial0/2/0 no ip address clock rate 2000000 shutdown ! interface Serial0/2/1 no ip address clock rate 2000000 shutdown ! interface Vlan1 no ip address shutdown ! router eigrp 1 network 192.168.4.0 network 192.168.5.0 network 100.0.0.0 ! ip classless ip route 0.0.0.0 0.0.0.0 Serial0/1/0 ip route 0.0.0.0 0.0.0.0 192.168.5.1 ! ip flow-export version 9 ! ! ! ! ! ! ! ! line con 0 ! line aux 0 ! line vty 0 4 login ! ! ! end
04-24-2019 05:22 AM
What is the common subnet that connects both routers (if there is one) ? Your tunnel destinations need to be an IP address configured on the respective other side of the tunnel. It should look like below:
R1
interface Serial0/2/1
ip address 192.168.4.13 255.255.255.252
!
interface Tunnel1
ip address 100.100.100.2 255.255.255.252
mtu 1476
tunnel source Serial0/2/1
tunnel destination 192.168.4.14
R2
interface Serial0/2/1
ip address 192.168.4.14 255.255.255.252
!
interface Tunnel1
ip address 100.100.100.1 255.255.255.252
mtu 1476
tunnel source Serial0/2/1
tunnel destination 192.168..4.13
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide