GRE Encapsulation/Decapsulation

Points to Note

• The maximum number of supported tunnels per device is 50.

• Duplicate tunnels are not permitted. A tunnel is considered duplicate if the Source IP, Destination IP, and VNI are the same.

• The same tunnel cannot be used for both encapsulation and decapsulation.

• A tunnel and an Ethernet/Port-channel interface cannot both be configured as network ports simultaneously.

• A tunnel cannot be configured as both a network port and a tool port within the same flow.

• A tunnel cannot be associated with multiple flows.

Supported only on Broadcom Trident3

Tunnel Configuration

Reference

Command	tunnel <tunnelname> gre no tunnel <tunnelname>
Description	Create GRE tunnel
Parameters	Tunnelname
Mode	CONFIG

Example

pbnoscli(config)# tunnel tunnel1 gre
pbnoscli(config)# no tunnel tunnel1

Tunnel Attributes

Using this command, you can configure the attributes of the tunnel. Gateway is provisioned only when the nodes are not directly connected

Note: Updation of the tunnel is not supported. The tunnel must be deleted and re-configured for any change

Reference

Command	[no] tunnel <tunnel-name> gre
Description	Create tunnel
Parameters	tunnel-interface: Configure tunnel ports source-ip : Source IP address destination-ip : Destination IP address gateway : Gateway IPv4 Address key : GRE key[ range: 0 - 4294967295] vlan-tagging : Tunnel VLAN Tagging
Mode	TUNNEL

Example

tunnel tunnel70 gre
comment This is a GRE Encapsulation Tunnel
tunnel-interface Ethernet5/1
source-ip 200.2.2.10
gateway 200.2.2.1
destination-ip 34.54.64.1
key 5000
!
flow flow1
enable
network-ports Ethernet32/1
tool-ports tunnel70
rule 1 permit match-all counters enable
rule 2 ipv6 permit match-all counters enable
!

pbnoscli# show gre tunnel all

===============================================
GRE Tunnel - tunnel70
===============================================
Comment           : This is a GRE Encapsulation Tunnel
Tunnel Port       : Ethernet5/1     
Source IP         : 200.2.2.10      
Destination IP    : 34.54.64.1      
Source MAC        : 8c:04:ba:b0:60:40
Gateway IP        : 200.2.2.1       
Destination MAC   : 00:11:01:00:00:01
Key               : 5000            
Tunnel Status     : UP              

Flow based Encap Configuration

You can set the rules for the VxLAN Encap using flow. Here the tool port must be the tunnel name created using tunnel config command.

Reference

Command	flow flowname network-ports Ethernet32/1 tool-ports tunnel70 rule 1 permit match-all counters enable rule 2 ipv6 permit match-all counters enable
Description	Add flow
Parameters	description Configure description for flow enable Enable the flow end Exit to Exec Prompt exit Exit from the Current Prompt from Configure network or TAP ports no no form rule Configure rule to Configure network tool or analyzer ports
Mode	FLOW

Example

pbnoscli(config)# flow flow1
pbnoscli(config-flow-flow1)# network-ports Ethernet32/1
pbnoscli(config-flow-flow1)# tool-ports tunnel70
pbnoscli(config-flow-flow1)# rule 1 permit match-all counters enable
pbnoscli(config-flow-flow1)# rule 2 ipv6 permit match-all counters enable
pbnoscli(config-flow-flow1)# end
pbnoscli#

GRE Decapsulation

tunnel tunnel1 gre
tunnel-interface Ethernet10/1
source-ip 10.10.1.6
gateway 10.10.1.1
destination-ip 20.10.1.10
key 6050
!
flow flow1
network-ports tunnel1
tool-ports Ethernet50/1
rule 1 permit match-all counters enable
!