H3C Technologies H3C SecPath F1000-E User Manual
Page 34
22
Figure 18 Learning tunnel destination addresses dynamically
Different from a P2P GRE tunnel interface, a P2MP GRE tunnel interface does not require manual
configuration of the tunnel destination addresses but learns them from GRE tunnel packets received from
peers. As shown in
, Device A resides at the headquarters and has a P2MP GRE tunnel
interface configured, while Device B resides at a branch and has a P2P GRE tunnel interface configured.
After Device A receives a GRE packet from Device B, it establishes a tunnel entry, taking the source
address in the transport protocol (IPv4) header as the tunnel destination address and the source address
in the passenger protocol (IPv4) header (that is, the private network address of the branch) as the packet
destination address.
When forwarding a packet through a P2MP GRE tunnel, the device searches the tunnel entries for the
tunnel destination address according to the packet’s destination address, and then encapsulates the
packet with GRE and then with IPv4, using the tunnel destination address as the destination address in
the transport protocol header.
NOTE:
The mask length of the packet destination address in a tunnel entry is configurable. After you configure a
mask length for a packet destination address, the node at the headquarters establishes only one tunnel
entry for private IP addresses in the same network segment, thus reducing the number of tunnel entries on
the node at the headquarters and allowing branches to initiate establishment of tunnels by sending
emulated data to the node at the headquarters.
10.2.1.2/24
10.1.1.2/24
Tunnel0
10.3.1.1/24
11.1.1.1/24
11.1.1.2/24
IPv4 network
GRE tunnel
Tunnel0
10.3.1.2/24
Device A
Device B
Host A
Host B
Headquarters
Branch
10.1.1.2
GRE
11.1.1.2
Tun Dest
11.1.1.2
Dest
10.1.1.0/24
- H3C SecPath F5000-A5 Firewall H3C SecPath F1000-A-EI H3C SecPath F1000-E-SI H3C SecPath F1000-S-AI H3C SecPath F5000-S Firewall H3C SecPath F5000-C Firewall H3C SecPath F100-C-SI H3C SecPath F1000-C-SI H3C SecPath F100-A-SI H3C SecBlade FW Cards H3C SecBlade FW Enhanced Cards H3C SecPath U200-A U200-M U200-S H3C SecPath U200-CA U200-CM U200-CS