Got it
Huawei Enterprise Support Community
Community Forums Routing & Switching
DSVPN tunnel Huawei NE20E...

DSVPN tunnel Huawei NE20E-S2F

Created: Nov 21, 2019 09:10:40Latest reply: Nov 30, 2019 00:59:55 1151 4 0 0 1
  Rewarded HiCoins： 0 (problem resolved)
View the author 1#

Hi all,


I`m trying to establish a DSVPN tunnel on a NE20E-S2F with latest software release V800R010C10SPC500. I have a loopback that it is binded to a VPN and when I try to stablish the interface tunnel with mGRE I get the following error:


“Error: The current tunnel type does not support VPN binding.”


I don´t see this limitation in any of the Huawei documentation I am following for this hardware and version, is it not possible to stablish an mGRE tunnel with NHRP if the interface is binded to a vpn instance?. Is there another way I can do it? Please help.


The supposed configuration is the following:


interface LoopBack0
 ip binding vpn-instance VPN
 ip address 100.100.100.1 255.255.255.255
 binding tunnel gre


interface tunnel 0

ip address 172.16.1.1 255.255.255.0

tunnel-protocol gre p2mp
nhrp enable
nhrp entry multicast dynamic
source Loopback0


Once I try to configure Loopback0  as the source for the tunnel I get the error: “Error: The current tunnel type does not support VPN binding.”


Kind regards,



Like (0) Dislike (0) Favorite(1) Share Report
Previous: CE switch 802.1x authentication configuration guide
Next: Alarm about license generated
Featured Answers

Recommended answer

(0) (0)
chenhui
Admin Created Nov 21, 2019 10:35:54

Posted by user_3495881 at 2019-11-21 09:23 Also, according to documentation, the source vpn instance should be possible.source { [ vpn-instance ...
hello, it seems the mGRE doesn't support the interface which bind to the vpn-instance, as the source interface.
for the second problem, I searched the documentation, no parameter vpn-instance vpn-instance-name is found in the command source. Maybe you can share me the link.
View more
  • x
  • convention：
All Answers
(0) (0)
2#
user_3495881
user_3495881 Created Nov 21, 2019 09:23:29

Also, according to documentation, the source vpn instance should be possible.

source { [ vpn-instance vpn-instance-name ] source-ip-address | interface-type interface-number }
The source address or source interface is configured for the tunnel interface.

But in the parameters prompted for source command there is no vpn-intance option.

[Router1]display this
#
interface Tunnel0
ip address 172.16.1.1 255.255.255.0
tunnel-protocol gre p2mp
nhrp enable
nhrp entry multicast dynamic
[Router1]source ?
X.X.X.X IP address
Eth-Trunk Ethernet-Trunk interface
GigabitEthernet GigabitEthernet interface
LoopBack LoopBack interface
[Router1]
View more
  • x
  • convention：
(0) (0)
3#
chenhui
chenhui Admin Created Nov 21, 2019 10:35:54

Posted by user_3495881 at 2019-11-21 09:23 Also, according to documentation, the source vpn instance should be possible.source { [ vpn-instance ...
hello, it seems the mGRE doesn't support the interface which bind to the vpn-instance, as the source interface.
for the second problem, I searched the documentation, no parameter vpn-instance vpn-instance-name is found in the command source. Maybe you can share me the link.
View more
  • x
  • convention：
(0) (0)
4#
user_3495881
user_3495881 Created Nov 21, 2019 11:10:02

Hi Chenhui,

I have tried other interfaces and as long as it is binded to a vpn instance it prompts the error mentioned aboved. Does this mean that mGRE configuration is not posible if it is binded to a vpn instance for this model?

I´m looking through the Hedex Lite documentation for this Model and software Versión. Anyway, a simple link would be the following:

https://support.huawei.com/enterprise/en/doc/EDOC1100055406/118c14a8/configuring-mgre

Thank you and Kind regards,
View more
  • x
  • convention：
(0) (0)
5#
chenhui
chenhui Admin Created Nov 30, 2019 00:59:55

Posted by user_3495881 at 2019-11-21 11:10 Hi Chenhui,I have tried other interfaces and as long as it is binded to a vpn instance it prompts th ...
I think so, the interface binded to a vpn instance cannot be assign as the source interface of the mGRE.
View more
  • x
  • convention：
Back to list

Comment

Advanced
B Color Image Link Quote Code Smilies
You need to log in to comment to the post Login | Register
Comment

Notice: To protect the legitimate rights and interests of you, the community, and third parties, do not release content that may bring legal risks to all parties, including but are not limited to the following:
  • Politically sensitive content
  • Content concerning pornography, gambling, and drug abuse
  • Content that may disclose or infringe upon others ' commercial secrets, intellectual properties, including trade marks, copyrights, and patents, and personal privacy
Do not share your account and password with others. All operations performed using your account will be regarded as your own actions and all consequences arising therefrom will be borne by you. For details, see " User Agreement."

My Followers

Login and enjoy all the member benefits

Login
Huawei Website Support About Huawei Privacy User Agreement Terms of Use Cookies Cookie Settings
Huawei Enterprise Huawei Carrier Forum Training & Certification

Contact Us: e_online@huawei.com Copyright © 2022 Huawei Technologies Co., Ltd. All rights reserved.

APP

Block
Are you sure to block this user?
Users on your blacklist cannot comment on your post,cannot mention you, cannot send you private messages.
Reminder
Please bind your phone number to obtain invitation bonus.