beautypg.com

Vpn force-all, Vpn force-all -14 – Netopia 3300 User Manual

Page 146

background image

5-14 Firmware User Guide

VPN force-all

GRE tunnelling suppor ts “VPN force-all,” which forces all traffic coming from the LAN onto the GRE tunnel. You
accomplish this by setting the default route to go through the GRE tunnel. A secondar y host route where all
tunneled GRE packets route to the actual WAN inter face can be configured as a static route when required.

The following table outlines various force-all configurations for different networking scenarios; all other options
can safely use their default values:

Easy Setup

System Configuration Menu

GRE Profile

Encapsulation

Menu

GRE Profile IP

Parameters Menu

Static WAN IP

IP =

some_IP_address

Mask =

some_IP_mask

Data Link

Encapsulation =

1483, 1490, HDLC,

PPP

IP Default Gateway =

127.0.0.2

Gateway Static Route:

Destination Network =

GRE

Remote_Tunnel_End_Point

Destination Netmask =

Remote_Tunnel_End_Point_

netmask

Next Gateway = local_WAN_IP

Remote Tunnel End

Point =

peer_tunnel_

IP_address

Remote Member IP

= 127.0.0.2

Remote Member

Mask cannot be

255.255.255.255

Dynamic WAN IP

IP = 0.0.0.0

Mask = 0.0.0.0

IP Default Gateway =

127.0.0.2

Gateway static route is

recommended

see above

see above

Static PPPoE

Remote IP =

some_IP_address

Remote Mask =

some_IP_mask

see above

see above

see above

Auto PPPoE

Remote IP =

127.0.0.2

Remote Mask =

255.255.255.255

IP Default Gateway =

127.0.0.3

see above

Remote Member IP

= 127.0.0.3

Remote Member

Mask cannot be

255.255.255.255

Note:

A GRE tunnel cannot transmit RIP routes over a force-all tunnel, or with a remote member IP with a

host par t of all zeros.