[c-nsp] mgre dilemma
matt carter
matt at iseek.com.au
Mon Nov 27 15:14:30 EST 2006
hi all,
i should have mentioned also (my bad) i already have mgre between 6 x sup720
(12.2 SXF) working just fine, it has only when i have gone to add a 7301 to
the mix i have realised the 7301 (12.2S) wont bring up the mgre without a
key, but the sup720's wont take a key without dropping to software
switching. so im damned if i do and damned if i dont.. the workaround for
now has been to use individual gre tunnel's which doesnt require key and
enables hardware switching on the sup720 end..
any advice appreciated..
--matt
> -----Original Message-----
> From: Rodney Dunn [mailto:rodunn at cisco.com]
> Sent: Tuesday, 28 November 2006 5:00 AM
> To: matt carter
> Cc: cisco-nsp at puck.nether.net
> Subject: Re: [c-nsp] mgre dilemma
>
> I think you need to equip it with a VPNSM blade or the new
> VPN SPA to get mGRE in hardware and that's with IPSEC/GRE.
>
> Rodney
>
>
> On Tue, Nov 28, 2006 at 04:40:17AM +1000, matt carter wrote:
> >
> > hi all,
> >
> > 7301 wont appear to bring up mgre without a tunnel key
> >
> > multipoint
> > (Optional) Enables a GRE tunnel to be used in a multipoint fashion.
> > Can be used with the gre ip keyword only, and requires the
> use of the
> > tunnel key command.
> >
> > but the sup 720 wont do mgre with tunnel key in hardware
> >
> > %Warning: Feature not supported in hardware. Tunnel200
> packets will be
> > software switched
> >
> > so what to do to avoid packets being software switched on sup720 ??
> >
> > --matt
> >
> >
> >
> >
> > _______________________________________________
> > cisco-nsp mailing list cisco-nsp at puck.nether.net
> > https://puck.nether.net/mailman/listinfo/cisco-nsp
> > archive at http://puck.nether.net/pipermail/cisco-nsp/
More information about the cisco-nsp
mailing list