Users Guide

tunnel source vlan 10
tunnel destination 2001:1:2:2020::1
trusted
Controller-2 Configuration
(Controller-2) (config) # interface tunnel 206
description “IPv6 Layer-3 GRE 206"
tunnel mode gre ipv6
ip address 2001:1:2:1::2
tunnel source vlan 20
tunnel destination 2001:1:2:1010::1
trusted
Limitations for Static IPv6 Layer-3 Tunnels
ArubaOS does not support the following functions for static IPv6 Layer-3 GREtunnels:
l IPv6 Auto-configuration and IPv6 Neighbor Discovery mechanisms do not apply to IPv6 GRE tunnels.
l The tunnel encapsulation limit and Maximum Transmission Unit (MTU) discovery options are not supported
on IPv6 GRE tunnels.
Directing Traffic into the Tunnel
You can direct traffic into a GRE tunnel by configuring one of the following:
l Static route: Redirects traffic to the IP address of the tunnel.
l Firewall policy (session-based ACL): Redirects traffic to the specified tunnel ID.
About Configuring Static Routes
You can configure a static route that specifies the IP address of a tunnel as the next-hop for traffic for a specific
destination. See Configuring Static Routes on page 179 for detailed information on how to configure a static
route.
While redirecting traffic into a Layer-3 GREtunnel via a static route, be sure to use the controller's tunnel IPaddress
as the next-hop, instead of providing the destination controller's tunnel IP address.
Referring to Figure 20, the following are examples of the required static route configurations to direct traffic
into the IPv4 Layer-3 GRE tunnel. for Controller-1 and Controller-2:
l For the controller named Controller-1:
(Controller-1) (config) # ip route 20.20.202.0 255.255.255.0 1.1.1.1
l For the controller named Controller-2:
(Controller-2) (config) # ip route 10.10.101.0 255.255.255.0 1.1.1.2
Configuring a Firewall Policy Rule
You can configure a firewall policy rule to redirect selected traffic into a GRE tunnel.
Traffic redirected by a firewall policy rule is not forwarded to a tunnel that is “down” (see the next section,
Configuring Tunnel Keepalives, for more information on how GRE tunnel status is determined).
From the WebUI
To direct traffic into a GRE tunnel via a firewall policy via the WebUI:
1. On the controller, navigate to the Configuration > Security > Access Control > Policies page.
Dell Networking W-Series ArubaOS 6.4.x | User Guide Network Configuration Parameters | 190