Wireless Access

last person joined: 17 hours ago 

Access network design for branch, remote, outdoor, and campus locations with HPE Aruba Networking access points and mobility controllers.
Expand all | Collapse all

GRE Tunnel from Local to Master for Guest traffic

This thread has been viewed 13 times
  • 1.  GRE Tunnel from Local to Master for Guest traffic

    Posted Dec 20, 2011 09:28 AM

    Hi All,

     

    I want to tunnel guest traffic from a local controllers to the master controllers so all guest traffic breaks out from one point.. 

     

    I'm not 100% sure how to do this!

     

    Guest VLAN is 960 which is present on local and master controllers.


    Can someone point me in the right direction?

    I've had a look at this post but I'm not 100% sure of the config http://community.arubanetworks.com/t5/ArubaOS-and-Controllers/Using-GRE-Tunnels-to-centralize-L3-access/m-p/2831 

     

    James



  • 2.  RE: GRE Tunnel from Local to Master for Guest traffic

    EMPLOYEE
    Posted Dec 20, 2011 10:29 AM

    Whitehead,

     

    Which part of it are you unsure of?  

     

    The only issue I see is that you might have to reduce the MTU on the GRE tunnel (1400) so that it can traverse the existing ipsec tunnel that is between the Aruba Controller and the local.

     



  • 3.  RE: GRE Tunnel from Local to Master for Guest traffic

    Posted Dec 20, 2011 10:56 AM

    Here's the example cli commands in the user guide.

     

    interface tunnel <id>
    tunnel mode gre <num> <ip>
    ip address <ipaddr> <netmask>
    no shutdown
    tunnel source {<ipaddr>| loopback | vlan <vlan>}
    tunnel destination <ipaddr>

     

    What is the ip address section? Is that just for connectivity between the GRE endpoints so isn't overlapping any ip interfaces?



  • 4.  RE: GRE Tunnel from Local to Master for Guest traffic

    EMPLOYEE
    Posted Dec 20, 2011 10:58 AM

    The destination is the ip address of the controller at the other end.

    The tunnel source is the source ip address of the tunnel on the controller it is configured on.  Important for the *other* controller that has the reverse configuration, and expects trafffic from that ip address to form the tunnel.  You want the source ip address to be the egress interface of that controller.



  • 5.  RE: GRE Tunnel from Local to Master for Guest traffic

    Posted Dec 20, 2011 11:00 AM

    Thanks for the reply.

     

    I understand the source and destination bit but what is the other "ip address" section?



  • 6.  RE: GRE Tunnel from Local to Master for Guest traffic
    Best Answer

    EMPLOYEE
    Posted Dec 20, 2011 11:03 AM

    It does NOT need an ip address.  That would only be if you want to create a layer3 tunnel, but you do not want to do this in your situation.