beautypg.com

Configuration example, Network requirements – H3C Technologies H3C SecPath F1000-E User Manual

Page 172

background image

26

To do…

Use the command…

Remarks

Enter tunnel interface view

interface tunnel number

Configure an IPv4 address for
the tunnel interface

ip address ip-address { mask |
mask-length
} [ sub ]

Required
By default, no IPv4 address is
configured for the tunnel interface.

Specify the IPv4 over IPv4
tunnel mode

tunnel-protocol ipv4-ipv4

Optional
The default tunnel mode is GRE over

IPv4.
The same tunnel mode should be

configured at both ends of the tunnel.
Otherwise, packet delivery will fail.

Configure a source address
or interface for the tunnel

interface

source { ip-address |

interface-type interface-number }

Required
By default, no source address or

interface is configured for the tunnel.

Configure a destination
address for the tunnel
interface

destination ip-address

Required
By default, no destination address is

configured for the tunnel.

NOTE:

To encapsulate and forward IPv4 packets whose destination address does not belong to the subnet
where the receiving tunnel interface resides, you need to configure a static route or dynamic routing for

forwarding those packets through this tunnel interface. If you configure a static route to that destination

IPv4 address, specify this tunnel interface as the outbound interface, or the peer tunnel interface address
as the next hop. A similar configuration needs to be performed at the other tunnel end. If you configure

dynamic routing at both ends, enable the dynamic routing protocol on both tunnel interfaces. For the

detailed configuration, see

Static Routing Configuration or other routing protocol configurations in the IP

Routing Volume.

The IPv4 address of the local tunnel interface cannot be on the same subnet as the destination address
of the tunnel.

The destination address of a route with a tunnel interface as the egress interface must not be on the same
subnet as the destination address of the tunnel.

Two or more tunnel interfaces using the same encapsulation protocol must have different source and
destination addresses.

If you specify a source interface instead of a source address for the tunnel, the source address of the
tunnel is the primary IP address of the source interface.

Configuration Example

Network requirements

As shown in

Figure 12

, the two subnets Group 1 and Group 2 running IPv4 are interconnected via an

IPv4 over IPv4 tunnel between Device A and Device B.