Panasonic NN46240-710 - Manual (Page 67)

Nortel Secure Router 8000 Series
Troubleshooting - VPN___________ 2 GRE troubleshooting
destination 1.1.1.1
gre key 2
#
From the preceding display, you can see that the IP addresses of both ends are 24-bit. They IP
addresses are not in the same network segment: one is 11.1.1.1 and the other is 21.1.1.1.
Use the display fib command on both ends to check whether the route to the peer Tunnel 1/0/0
is configured on both ends.
The display on Nortel 1 is as follows:
FIB Table:
Total number of Routes : 11
Destination/Mask Nexthop Flag TimeStamp Interface TunnelID
127 .0.0.1/32 127 .0.0.1 HU t 138] InLoop0 0x0
127 .0.0.0/8 127 .0.0.1 U t 138] InLoop0 0x0
1.1 .1.1/32 127 .0.0.1 HU t 140437] InLoop0 0x0
172 .2.6.1/32 127 .0.0.1 HU t 407843] InLoop0 0x0
172 .2.6.0/24 172 .2.6.1 U t 407843] Eth4/2/0 0x0
172 .2.4.0/24 172 .2.6.2 DGU t 442303] Eth4/2/0 0x0
2.2 .2.2/32 172 .2.6.2 DGHU t 442303] Eth4/2/0 0x0
11. 1.1 .1/32 127 .0.0.1 HU t 494003] InLoop0 0x0
11. 1.1 .0/24 11. 1.1 .1 U t 494003] Tun1/0/0 0x0
The display on Nortel 2 is as follows:
FIB Table:
Total numiber of Routes : 13
Destination/Mask Nexthop Flag TimeStamp Interface Token
127.0.0.1/32 127 .0.0.1 HU t 0] InLoop0 0x0
127.0.0.0/8 127 .0.0.1 U t 0] InLoop0 0x0
172.2.4.1/32 127 .0.0.1 HU t 0] InLoop0 0x0
21.1.1.1/32 127 .0.0.1 HU t 0] InLoop0 0x0
2.2.2.2/32 127 .0.0.1 HU t 0] InLoop0 0x0
172.2.4.0/24 172 .2.4.1 U t 0] Eth3/2/0 0x0
172.2.6.0/24 172 .2.4.2 DGU t 0] Eth3/2/0 0x0
1.1.1.1/32 172 .2.4.2 DGHU t 0] Eth3/2/0 0x0
From the preceding display, you can see that no route to the remote tunnel interface is
configured on both ends. Therefore, configure the route to peer Tunnel 1/0/0 on both ends:
• Configure ip route-static 21.1.1.0 24 tunnel 1/0/0 on Nortel 1.
• Configure ip route-static 11.1.1.0 24 tunnel 1/0/0 on Nortel 2.
After you complete the configuration, on both Nortel 1 and Nortel 2, ping their peer Tunnel
1/0/0 separately and receive the response packets. A GRE tunnel establishes normally.
If the fault persists after the preceding configuration, contact Nortel technical personnel.
Troubleshooting procedure
Step 1 Check that the GRE keys are consistent on both ends of the tunnel interface.
Step 2 Check that the route to the peer tunnel interface is configured on both ends.
—End
Issue 5.3 (30 March 2009) Nortel Networks Inc. 2-13