vyos/vyos-documentation
1
0
Fork 0
mirror of https://github.com/vyos/vyos-documentation.git synced 2025-11-02 20:02:05 +01:00
Code Issues Packages Projects Releases Wiki Activity

tunnels/gre: add gre-bridge and gre keys

Browse Source
This commit is contained in:
currite 2020-11-03 21:10:59 +01:00
parent d09ccc9cf7
commit 082a764785
1 changed files with 41 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

41
docs/interfaces/tunnel.rst
View File

@ -112,6 +112,47 @@ The Cisco router defaults to 'gre ip' otherwise it would have to be configured a
tunnel source 203.0.113.10
tunnel destination 198.51.100.2
Tunnel keys
^^^^^^^^^^^
GRE is also the only classic protocol that allows creating multiple tunnels with the same source and destination due to its support for tunnel keys. Despite its name, this feature has nothing to do with security: it's simply an identifier that allows routers to tell one tunnel from another.
An example:
.. code-block:: none
set interfaces tunnel tun0 local-ip 192.0.2.10
set interfaces tunnel tun0 remote-ip 192.0.2.20
set interfaces tunnel tun0 address 10.40.50.60/24
set interfaces tunnel tun0 parameters ip key 10
.. code-block:: none
set interfaces tunnel tun0 local-ip 192.0.2.10
set interfaces tunnel tun0 remote-ip 192.0.2.20
set interfaces tunnel tun0 address 172.16.17.18/24
set interfaces tunnel tun0 parameters ip key 20
GRE-Bridge
^^^^^^^^^^
While normal GRE is for layer 3, GRE-Bridge is for layer 2. GRE-Bridge can encasulate Ethernet frames, thus it can be bridged with other interfaces to create datalink layer segments that span multiple remote sites.
Layer 2 GRE example:
.. code-block:: none
set interfaces bridge br0
set interfaces tunnel tun0 encapsulation gre-bridge
set interfaces tunnel tun0 local-ip 192.0.2.10
set interfaces tunnel tun0 remote-ip 192.0.2.20
set interfaces tunnel tun0 parameters ip bridge-group bridge br0
set interfaces ethernet eth1 bridge-group br0
As you can see, the bridge-group option for tunnels is in a rather unusual place, different from all other interfaces.
Troubleshooting
^^^^^^^^^^^^^^^