[c-nsp] mgre dilemma

matt carter matt at iseek.com.au
Mon Nov 27 15:14:30 EST 2006


hi all,

i should have mentioned also (my bad) i already have mgre between 6 x sup720
(12.2 SXF) working just fine, it has only when i have gone to add a 7301 to
the mix i have realised the 7301 (12.2S) wont bring up the mgre without a
key, but the sup720's wont take a key without dropping to software
switching. so im damned if i do and damned if i dont.. the workaround for
now has been to use individual gre tunnel's which doesnt require key and
enables hardware switching on the sup720 end..

any advice appreciated..

--matt

> -----Original Message-----
> From: Rodney Dunn [mailto:rodunn at cisco.com] 
> Sent: Tuesday, 28 November 2006 5:00 AM
> To: matt carter
> Cc: cisco-nsp at puck.nether.net
> Subject: Re: [c-nsp] mgre dilemma
> 
> I think you need to equip it with a VPNSM blade or the new 
> VPN SPA to get mGRE in hardware and that's with IPSEC/GRE.
> 
> Rodney
> 
> 
> On Tue, Nov 28, 2006 at 04:40:17AM +1000, matt carter wrote:
> > 
> > hi all,
> > 
> > 7301 wont appear to bring up mgre without a tunnel key
> > 
> > multipoint	
> > (Optional) Enables a GRE tunnel to be used in a multipoint fashion. 
> > Can be used with the gre ip keyword only, and requires the 
> use of the 
> > tunnel key command.
> > 
> > but the sup 720 wont do mgre with tunnel key in hardware
> > 
> > %Warning: Feature not supported in hardware. Tunnel200 
> packets will be 
> > software switched
> > 
> > so what to do to avoid packets being software switched on sup720 ??
> > 
> > --matt
> > 
> > 
> > 
> > 
> > _______________________________________________
> > cisco-nsp mailing list  cisco-nsp at puck.nether.net 
> > https://puck.nether.net/mailman/listinfo/cisco-nsp
> > archive at http://puck.nether.net/pipermail/cisco-nsp/




More information about the cisco-nsp mailing list