Introduction of GRE VPN of S switches

21

Introduction to GRE of S series switches excluding the S1700:
Generic Routing Encapsulation (GRE) encapsulates packets of some network-layer protocols, such as Internetwork Packet Exchange (IPX), IPv6, and AppleTalk, so that the encapsulated packets can be transmitted over networks of a different network-layer protocol, such as the IPv4 network.
As a Layer 3 tunneling technology, GRE encapsulates packets of a protocol into packets of another protocol to transparently transmit packets over GRE tunnels. This technology enables packet transmission on heterogeneous networks.
GRE is easy to implement, imposing low burden on devices on both ends of a tunnel.
GRE tunnels can connect networks running various network protocols over the IPv4 network, using the original network architecture and reducing costs.
GRE extends the operation scope of network protocols with limited hop counts, allowing for flexible enterprise networking.
GRE connects discontinuous subnets and sets up VPNs, implementing secure connections between the enterprise headquarters and branches.

Other related questions:
Do S series switches support GRE
The following models and versions of S series switches excluding the S1700 support GRE VPN: -Model- -Starting Version - S5710EI V200R003 (V200R006 and later versions do not support the S5710EI.) S5700HI V200R003 (V200R006 and later versions do not support the S5700HI.) S5710HI V200R003 (V200R006 and later versions do not support the S5710HI.) S5720EI V200R007C00 (V200R007C10 and later versions do not support the S5720EI.) S5720HI V200R006 S6300EI V200R005 (V200R006 and later versions do not support the S6300EI.) S6320EI V200R008 S7700 V100R003 S9700 V200 R001 S12704 V200R008 S12708/S12712 V200R005 S9300 V100R002 S9300E V200R002 Modular switches (S7700/S9700/S9300/S12700) have the following limitations: - SA series cards (excluding the ET1D2X12SSA0 card) do not support the GRE function. - In V200R005, X1E series cards and the XGE interface connecting ACU2/ET1D2IPS0S00/ET1D2FW00S00/ET1D2FW00S01/ET1D2FW00S02/LE1D2FW00S01 card do not support the GRE function. - In V200R006 and later versions, if the tunnel interface is configured with the service link function, the tunnel type, source address, and destination address configured on this interface cannot be modified.

GRE tunnel configuration on the USG6000
The USG6000 GRE scenarios are as follows: 1. Static route-based GRE tunnel The NGFW adopts the dynamic routing protocol. Intranet users can transmit data that is not supported by certain public network devices over the GRE tunnel. 2. OSPF-based GRE tunnel The NGFW adopts the OSPF routing protocol. Intranet users can transmit data that is not supported by certain public network devices over the GRE tunnel. For specific scenarios and configuration cases, click Configuring a Static Route-based GRE Tunnel.

What is MUX VLAN on S series switch
On S series switches (except S1700), Multiplex VLAN (MUX VLAN) provides a mechanism that controls network resources through VLANs. The MUX VLAN involves a principal VLAN and multiple subordinate VLANs. Subordinate VLANs are classified into group VLANs and separate VLANs. Member interfaces in subordinate VLANs can communicate with interfaces in the principal VLAN but cannot communicate with each other. Interfaces in a subordinate group VLAN can communicate with each other, but interfaces in a subordinate separate VLAN are isolated from each other.

If you have more questions, you can seek help from following ways:
To iKnow To Live Chat
Scroll to top