An example to configure GRE over IPSEC

In this example, we give a very simple topology to make you easily understand how to configure GRE over IPSEC





The topology after simplifying


24e76694605cbc788023bc17eacd746b.png









Configuration


Step 1:        Set IPsec
extern profile and configure GRE first

Enable IPsec
function, according to your needs to create the profiles of IKE and IPsec policy



Note:



The profiles only take effect after clicking Apply
& Save.




8c69e576ed02ae4e0fe914fd89b68e5b.png


b1ab3ea96dc24031abd8f28fa93b1d7d.png


152134ab96e371e5676b109440fdf6a2.png

Server Config


7ee976866f14e861e1fe028e5b0ecd91.png

Client Config


ee888e4102650f20cd348f379fe79776.png

Set IPsec
Extern profile


44d365296bd5999822c8e4a136e721fc.png

6d327df4b88d296ac8385717b8b542e1.png

GRE Configuration:



Note:



The key
parameters in the GRE configuration and IPsec do not affect each other
independently, which can be set differently.



Server
Configuration



1159a8fed9c6f1cc7e259252d6946d3b.png

Client
Configuration



aea7d7d0d042280efdc2a16c7cf5b152.png


Step 2   Configure IPsec
Tunnels parameters

For
example,



If your
local network IP address is



192.168.255.0/24



Remote network
IP address is



192.168.2.0/24



The following example instructs you on how to set the parameters.



Server
Configuration:




74de29d53a48395769fa4b187ca52f89.png


Client
Configuration


7994b0d979047d54c76881c977d1d7f8.png






Check the
status of the tunnel




e7c42b758cc6be29a264fbd73578c6c3.png

906c51ea7c5861da0173ace22d8f169b.png


Step 3 Verify the VPN connection between Server and Client

Local LAN
ping Remote LAN (Server ping Client)




84e44d7fc87920a593586daaf7461f68.png

Remote LAN
ping Local LAN (Client ping Server)




4c0d36ff14a2bee4091d072ecd89f169.png


0 comments

To reply to the article, please Login or registered