02-23-2018 07:35 AM - edited 03-12-2019 05:03 AM
Hi folks, want to confirm when we create the GRE tunnel interface, is it logically facing the LAN side or WAN side?
Refer attached diagram. This will decide the policy-map`s direction that we plan to implement in our network.
02-23-2018 07:39 AM
Hi, If you are attempting to create a gre tunnel between the 2 routers and they route to each other via their WAN interfaces, then the tunnel source will be the WAN interface on both routers.
HTH
02-23-2018 08:01 AM
Thanks for the reply, the plan is to create multiple tunnel interfaces, each will be sourced from it`s own unique loopback interface and destination will be the loopback on the other side router. The loopbacks will have static routes pointing to the real-wan interface. In this case will the Tunnel interfaces still logically face the WAN side even though they are been sourced from the loopbacks?
02-23-2018 08:11 AM
Have you considered DMVPN? You can have 1 tunnel interface on a hub router, configuration will be much simplier, it will use NHRP to map the tunnel address to the nbma/public ip address. You can use statics or a dynamic routing protocol.
02-23-2018 08:51 AM - edited 02-23-2018 08:52 AM
Yes, we looked into that BUT our use case is DCI. We are interconnecting 2 x datacentres to serve multi-tenancy. This way we can have separate tunnel interface (in its own vrf) per tenant and then do traffic-shaping or policing on each tunnel. We will exchange the routes over the tunnel interfaces using BGP vpnv4 address family per VRF. What do you think?
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide