Verifying the configuration – H3C Technologies H3C SecPath F1000-E User Manual
Page 116
104
# Configure an IPv4 address for GigabitEthernet 0/2 (the physical interface of the tunnel).
[RouterB] interface GigabitEthernet 0/2
[RouterB-GigabitEthernet0/2] ip address 3.1.1.1 255.255.255.0
[RouterB-GigabitEthernet0/2] quit
# Create interface Tunnel 2.
[RouterB] interface tunnel 2
# Configure an IPv4 address for interface Tunnel 2.
[RouterB-Tunnel2] ip address 10.1.2.2 255.255.255.0
# Configure the tunnel encapsulation mode.
[RouterB-Tunnel2] tunnel-protocol ipv4-ipv4
# Configure the source address for interface Tunnel 2 (IP address of GigabitEthernet 0/2).
[RouterB-Tunnel2] source 3.1.1.1
# Configure a destination address for interface Tunnel 2 (IP address of GigabitEthernet 0/2 of
Router A).
[RouterB-Tunnel2] destination 2.1.1.1
[RouterB-Tunnel2] quit
# Configure a static route from Router B through interface Tunnel 2 to Group 1.
[RouterB] ip route-static 10.1.1.0 255.255.255.0 tunnel 2
Verifying the configuration
# Display the status of the tunnel interfaces on Router A and Router B.
[RouterA] display interface tunnel 1
Tunnel1 current state: UP
Line protocol current state: UP
Description: Tunnel1 Interface
The Maximum Transmit Unit is 64000
Internet Address is 10.1.2.1/24 Primary
Encapsulation is TUNNEL, service-loopback-group ID not set
Tunnel source 2.1.1.1, destination 3.1.1.1
Tunnel protocol/transport IP/IP
Output queue : (Urgent queuing : Size/Length/Discards) 0/100/0
Output queue : (Protocol queuing : Size/Length/Discards) 0/500/0
Output queue : (FIFO queuing : Size/Length/Discards) 0/75/0
Last 300 seconds input: 0 bytes/sec, 0 packets/sec
Last 300 seconds output: 2 bytes/sec, 0 packets/sec
4 packets input, 256 bytes
0 input error
12 packets output, 768 bytes
0 output error
[RouterB] display interface tunnel 2
Tunnel2 current state: UP
Line protocol current state: UP
Description: Tunnel2 Interface
The Maximum Transmit Unit is 64000
Internet Address is 10.1.2.2/24 Primary
Encapsulation is TUNNEL, service-loopback-group ID not set
- H3C SecPath F5000-A5 Firewall H3C SecPath F1000-A-EI H3C SecPath F1000-E-SI H3C SecPath F1000-S-AI H3C SecPath F5000-S Firewall H3C SecPath F5000-C Firewall H3C SecPath F100-C-SI H3C SecPath F1000-C-SI H3C SecPath F100-A-SI H3C SecBlade FW Cards H3C SecBlade FW Enhanced Cards H3C SecPath U200-A U200-M U200-S H3C SecPath U200-CA U200-CM U200-CS