GRE configuration on S series switch

14

Before configuring GRE, ensure that there is a reachable route between two ends of the tunnel.
In this example, the source address is 10.1.1.1/24 and the destination address is 10.2.1.1/24 (the source and destination addresses on the remote end are mirrored). The local end's subnet is 192.168.1.0/24, and the remote subnet is 192.168.2.0.The configurations on S series switches, except S1700 are as follows:
Local end:
[HUAWEI1] interface tunnel 1 //Create a tunnel interface.
[HUAWEI1-Tunnel1] tunnel-protocol gre //Configure the GRE tunnel.
[HUAWEI1-Tunnel1] ip address 172.16.1.1 255.255.255.0 //Configure IP addresses for the GRE tunnel for routing.
[HUAWEI1-Tunnel1] source 10.1.1.1 //Configure the source address for the GRE tunnel.
[HUAWEI1-Tunnel1] destination 10.2.1.1 //Configure the destination address for the GRE tunnel.
[HUAWEI1-Tunnel1] quit
[HUAWEI1] ip route-static 192.168.2.0 255.255.255.0 tunnel 1 //Configure connection between connected subnets through the GRE tunnel.
Remote device:
[HUAWEI2] interface tunnel 1 //Create a tunnel interface.
[HUAWEI2-Tunnel1] tunnel-protocol gre //Configure the GRE tunnel.
[HUAWEI2-Tunnel1] ip address 172.16.1.1 255.255.255.0 //Configure IP addresses for the GRE tunnel for routing.
[HUAWEI2-Tunnel1] source 10.2.1.1 //Configure the source address for the GRE tunnel.
[HUAWEI2-Tunnel1] destination 10.1.1.1 //Configure the destination address for the GRE tunnel.
[HUAWEI2-Tunnel1] quit
[HUAWEI2] ip route-static 192.168.1.0 255.255.255.0 tunnel 1 //Configure connection between connected subnets through the GRE tunnel.

Other related questions:
Do S series switches support GRE
The following models and versions of S series switches excluding the S1700 support GRE VPN: -Model- -Starting Version - S5710EI V200R003 (V200R006 and later versions do not support the S5710EI.) S5700HI V200R003 (V200R006 and later versions do not support the S5700HI.) S5710HI V200R003 (V200R006 and later versions do not support the S5710HI.) S5720EI V200R007C00 (V200R007C10 and later versions do not support the S5720EI.) S5720HI V200R006 S6300EI V200R005 (V200R006 and later versions do not support the S6300EI.) S6320EI V200R008 S7700 V100R003 S9700 V200 R001 S12704 V200R008 S12708/S12712 V200R005 S9300 V100R002 S9300E V200R002 Modular switches (S7700/S9700/S9300/S12700) have the following limitations: - SA series cards (excluding the ET1D2X12SSA0 card) do not support the GRE function. - In V200R005, X1E series cards and the XGE interface connecting ACU2/ET1D2IPS0S00/ET1D2FW00S00/ET1D2FW00S01/ET1D2FW00S02/LE1D2FW00S01 card do not support the GRE function. - In V200R006 and later versions, if the tunnel interface is configured with the service link function, the tunnel type, source address, and destination address configured on this interface cannot be modified.

Introduction of GRE VPN of S switches
Introduction to GRE of S series switches excluding the S1700: Generic Routing Encapsulation (GRE) encapsulates packets of some network-layer protocols, such as Internetwork Packet Exchange (IPX), IPv6, and AppleTalk, so that the encapsulated packets can be transmitted over networks of a different network-layer protocol, such as the IPv4 network. As a Layer 3 tunneling technology, GRE encapsulates packets of a protocol into packets of another protocol to transparently transmit packets over GRE tunnels. This technology enables packet transmission on heterogeneous networks. GRE is easy to implement, imposing low burden on devices on both ends of a tunnel. GRE tunnels can connect networks running various network protocols over the IPv4 network, using the original network architecture and reducing costs. GRE extends the operation scope of network protocols with limited hop counts, allowing for flexible enterprise networking. GRE connects discontinuous subnets and sets up VPNs, implementing secure connections between the enterprise headquarters and branches.

SNMP configuration on S series switch
S series switches (except S1700 switches) support three SNMP versions: SNMPv1, SNMPv2c, and SNMPv3. SNMPv1 and SNMPv2c use community names for authentication, resulting in low security, whereas SNMPv3 uses authentication and encryption technologies to enhance security. The following uses SNMPv2c configuration as an example: [HUAWEI] snmp-agent //Enable SNMP. [HUAWEI] snmp-agent sys-info version v2c //Set the SNMP version to SNMPv2c. [HUAWEI] snmp-agent community write adminnms01 //Set the SNMP write community name. For common SNMP configuration information, see "Common SNMP Operations" in S1720&S2700&S3700&S5700&S6700&S7700&S9700 Series Switches Common Operation Guide. For typical SNMP configuration examples, see "Typical SNMP Configuration" in "Typical Network Management and Monitoring Configuration" of S1720&S2700&S3700&S5700&S6700&S7700&S9700 Typical Configuration Examples. Common configuration and typical configuration examples for S9300 and S12700 series switches are the same as those for Sx700 series switches. The Sx700 series switches are used as an example here.

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top