An example to configure GRE over IPSEC

In this example, we give a very simple topology to make you easily understand how to configure GRE over IPSEC

The topology after simplifying


24e76694605cbc788023bc17eacd746b.png

Configuration


Step 1:        Set IPsec extern profile and configure GRE first

Enable IPsec function, according to your needs to create the profiles of IKE and IPsec policy

Note:

The profiles only take effect after clicking Apply & Save.


8c69e576ed02ae4e0fe914fd89b68e5b.png


b1ab3ea96dc24031abd8f28fa93b1d7d.png


152134ab96e371e5676b109440fdf6a2.png

Server Config


7ee976866f14e861e1fe028e5b0ecd91.png

Client Config


ee888e4102650f20cd348f379fe79776.png

Set IPsec Extern profile


44d365296bd5999822c8e4a136e721fc.png

6d327df4b88d296ac8385717b8b542e1.png

GRE Configuration:

Note:

The key parameters in the GRE configuration and IPsec do not affect each other independently, which can be set differently.

Server Configuration

1159a8fed9c6f1cc7e259252d6946d3b.png

Client Configuration

aea7d7d0d042280efdc2a16c7cf5b152.png


Step 2   Configure IPsec Tunnels parameters

For example,

If your local network IP address is

192.168.255.0/24

Remote network IP address is

192.168.2.0/24

The following example instructs you on how to set the parameters.

Server Configuration:


74de29d53a48395769fa4b187ca52f89.png


Client Configuration


7994b0d979047d54c76881c977d1d7f8.png


Check the status of the tunnel


e7c42b758cc6be29a264fbd73578c6c3.png

906c51ea7c5861da0173ace22d8f169b.png


Step 3 Verify the VPN connection between Server and Client

Local LAN ping Remote LAN (Server ping Client)


84e44d7fc87920a593586daaf7461f68.png

Remote LAN ping Local LAN (Client ping Server)


4c0d36ff14a2bee4091d072ecd89f169.png


0 comments

To reply to the article, please Login or registered