H3C Technologies H3C SecPath F1000-E - Manual (Page 747)

1
Point to Multi-Point GRE Tunnel
P2MP GRE Tunnel Overview
Background
Figure 14 P2MP GRE tunnel application scenario
A traditional GRE tunnel is a point to point connection. To use traditional GRE tunnels on an enterprise
network shown as
Figure 14 , you need to configure a P2P GRE tunnel between the headquarters and
each branch. When an enterprise has plenty of branches, the configuration workload is huge and,
adding new branches requires additional configurations on the headquarters node, burdening network
administrators. Besides, if branches dial in to the network through ADSL, the configurations on the
headquarters is rather complicated due to the indetermination of the public network addresses of the
branches.
Dynamic VPN technologies such as Dynamic Virtual Private Network (DVPN) can solve the problem
because they support dynamic learning of the mappings of public network addresses and private
network addresses and thereby can dynamically establish tunnels between the headquarters and the
branches and between the branches. However, there is no unified standard for implementation of
dynamic VPN at present. As a result, vendors use their proprietary protocols to implement dynamic VPN,
making it difficult for devices of different vendors to cooperate.
The P2MP GRE tunnel technology solves this problem. It is very applicable to enterprise networks with a
lot of branches. In a P2MP GRE tunnel application, you only need to configure the tunnel interface on the
headquarters node to work in P2MP GRE tunnel mode and that on each branch node to work in
traditional P2P GRE tunnel mode. Then, a GRE tunnel will be established dynamically between the
headquarters and each branch.
Operation of the P2MP GRE Tunnel
The encapsulation and de-encapsulation of P2MP GRE tunnel packets are the same as those of P2P GRE
tunnel packets. For more information, see
Introduction to GRE .