No relevant resource is found in the selected language.

This site uses cookies. By continuing to browse the site you are agreeing to our use of cookies. Read our privacy policy>Search


To have a better experience, please upgrade your IE browser.


Configuration Guide - VPN

CloudEngine 12800 and 12800E V200R005C10

This document describes the configurations of VPN, including GRE, BGP/MPLS IP VPN, BGP/MPLS IPv6 VPN, VLL, PWE3, and VPLS.
Rate and give feedback :
Huawei uses machine translation combined with human proofreading to translate this document to different languages in order to help you better understand the content of this document. Note: Even the most advanced machine translation cannot match the quality of professional translators. Huawei shall not bear any responsibility for translation accuracy and it is recommended that you refer to the English document (a link for which has been provided).
Configuring a Tunnel Interface

Configuring a Tunnel Interface


A GRE tunnel is established between two tunnel interfaces; therefore, you need to configure tunnel interfaces on devices at both ends of a tunnel. Set the protocol type to GRE, specify the tunnel source address (or interface) and tunnel destination address, and specify IP addresses for tunnel interfaces.

Switch_1 in Figure 1-11 is used as an example to illustrate configurations on a tunnel interface.
  • Tunnel source address (or interface): indicates the source address or interface used for packet transmission. The tunnel source interface is the physical interface from which encapsulated packets are sent, that is, VLANIF100 on Switch_1. The tunnel source address is the IP address of the physical interface from which encapsulated packets are sent, that is, the IP address of VLANIF100 on Switch_1.

  • Tunnel destination address: indicates the destination address for packet transmission. The tunnel destination address is the IP address of the physical interface to which encapsulated packets are sent, that is, the IP address of VLANIF100 on Switch_2.

  • IP address of the tunnel interface: indicates an IP address assigned to the tunnel interface. A dynamic or static routing protocol uses this IP address to advertise the tunnel interface. The IP address of the tunnel interface may be a public network address or not. It can also be an IP address borrowed from another interface to save IP addresses. When the tunnel interface borrows an IP address from another interface, you cannot enable a dynamic routing protocol on the tunnel interface because it does not have an IP address of its own. You must configure a static route to ensure connectivity between the devices.

  • The same tunnel mode must be configured on both ends of the tunnel.
  • The switch does not support multilayer GRE encapsulation or decapsulation.
  • GRE tunnels consume internal forwarding resources of virtual local area networks (VLANs). Therefore, the number of VLANs that can be created on the switch will decrease after GRE is configured. That is, less than 4063 VLANs can be created.
Figure 1-11 Networking for GRE tunnel setup


  1. Run system-view

    The system view is displayed.

  2. Run interface tunnel interface-number

    A tunnel interface is created and the tunnel interface view is displayed.

  3. Run tunnel-protocol gre

    The protocol type of the tunnel interface is set to GRE.

  4. Run source { source-ip-address | interface-type interface-number }

    A source address or source interface is specified for the tunnel.

  5. Run destination [ vpn-instance vpn-instance-name ] dest-ip-address

    A destination address is specified for the tunnel.

    If a customer edge (CE) is connected to a provider edge (PE) through the GRE tunnel, specify a virtual private network (VPN) instance to add the tunnel interface to a private network routing table when configuring the destination address for the tunnel.

  6. (Optional) Run mtu mtu

    A maximum transmission unit (MTU) is configured for the tunnel interface.

    By default, the MTU of a tunnel interface is 1500 bytes.


    To change the MTU of a tunnel interface, run the shutdown command and then the undo shutdown command on the interface to make the new MTU effective.

  7. (Optional) Run tunnel pathmtu enable

    The path MTU auto-discovery on a tunnel is enabled.

    By default, path MTU auto-discovery is disabled for a GRE tunnel.


    The tunnel pathmtu enable and mtu commands cannot be run on the same tunnel interface. If the mtu command has been run on a tunnel interface, the tunnel pathmtu enable command cannot be executed on the interface.

  8. (Optional) Run mtu check enable

    MTU check is enabled on a GRE tunnel.

    By default, MTU check is disabled on a GRE tunnel.

  9. (Optional) Run description text

    An interface description is provided.

    By default, no description is provided for the tunnel interface.

  10. Run either of the following commands to specify an IP address for the tunnel interface.

    • Specify an IP address.

      • Specify an IPv4 address for the tunnel interface when IPv4 networks communicate using the GRE tunnel.

        Run ip address ip-address { mask | mask-length } [ sub ]

        An IPv4 address is specified for the tunnel interface.

      • Specify an IPv6 address for the tunnel interface when IPv6 networks communicate using the GRE tunnel.

        1. Run ipv6 enable

          The IPv6 function is enabled on the interface.

        2. Run ipv6 address { ipv6-address prefix-length | ipv6-address/prefix-length }

          An IPv6 address is specified for the tunnel interface.

    • Borrow an IP address.

      Run ip address unnumbered interface interface-type interface-number

      The tunnel interface is configured to borrow an IP address.


      A tunnel interface cannot borrow an IPv6 address.

  11. Run commit

    The configuration is committed.

Updated: 2019-04-03

Document ID: EDOC1100075353

Views: 14294

Downloads: 25

Average rating:
This Document Applies to these Products
Related Documents
Related Version
Previous Next