Wireless Access

Dear all,

i'm using AO 6.4.2.2.

is it possible to configure a  layer 2 GRE Tunnel from local to vrrp ip address .

if yes please tell me how , it very urgent.

rchahboune,

I found this:  http://community.arubanetworks.com/t5/Controller-Based-WLANs/Create-GRE-tunnel-between-VRRP/ta-p/180486 by searching this:  http://community.arubanetworks.com/t5/Support/ct-p/Support-Documentation-Downloads

thank you,

in my case  i have 2 master controlleur

master 1

192.168.8.2

master 2

192.168.8.3

master vrrp address

192.168.8.1

the local controller Address is

192.168.8.120

******** master gre config*******

interface tunnel 50
        description "Tunnel Interface"
        tunnel mode gre 50
        tunnel source 192.168.8.1
        tunnel destination 192.168.8.120
        trusted
        mtu 1400
        no inter-tunnel-flooding
        tunnel vlan 50,150-152

**********local gre config*************

interface tunnel 50
        description "Tunnel Interface"
        tunnel mode gre 50
        tunnel source 192.168.8.120
        tunnel destination 192.168.8.1
        trusted
        mtu 1400
        no inter-tunnel-flooding
        tunnel vlan 50,150-152

it do not work for me

rchabourne,

Have you tried setting it up with just a single VLAN, just between the local and the active master first?

when i configure a GRE tunnel between the local and the physical interface of the master (192.168.8.2) my GRE tunnel work normely but when i change the address with the VIP address  (192.168.8.1)  the GRE tunnel does not is not established

Please check you the post here http://community.arubanetworks.com/t5/Unified-Wired-Wireless-Access/L2-GRE-keepalive/m-p/188868/highlight/true#M38045

Layer 2 GRE tunnel to a VRRP does work.

it have not work with me.

do i need to actitvate keep alive

in my case only one address is a VRRP and I'm using version 6.4.2.2 , it my be a bug

You do not have to use keepalives.  Where did you get tunnel mode GRE 50?

in theProtocole number  field , you have to chose an number between 0-65535, by the way what does it mean

You should probably open a case with TAC to ensure that nothing is being overlooked.  On the surface, nothing seems wrong with your configuration.

I just went through this with TAC and later my SE and a producline engineer he hooked me up with.

In 6.3 anyway the problem stems from master-local traffic getting tunneled from the master VRRP address and therby messing with the master-local layer-2 traffic.

We added another vrrp address to the masters and use that for the tunnel endpoint.

Works like a charm.

Master pair:

master-redundancy
  master-vrrp 40
!
vrrp 40
  ip address 10.21.0.64
!
vrrp 41
  ip address 10.21.0.164
!
interface tunnel 91
        tunnel source 10.21.0.164
        tunnel mode gre 0
        tunnel destination 10.30.0.9

Local:

interface tunnel 91
        tunnel source 10.30.0.9
        tunnel mode gre 0
        tunnel destination 10.21.0.164

Matthew

it may be the cause of the problem especially that the local controller establishes an ipsec tunnel with the master controller, and with the GRE tunnel configured on the same IP address may cause  routing problem.
because the controller in both cases will add a route to the same destination

unfortunately my infra is flat (1 VLAN), so I can not create several vrrp  instence .

I made the same argument ;)

Just add rhe second VRRP address to the same VLAN as the first. Seems odd, works fine.