[c-nsp] Troubleshooting a GRE tunnel terminated in a MPLS VPN

Justin Shore justin at justinshore.com
Mon Nov 24 08:52:25 EST 2008


Justin Shore wrote:
> I'm testing a different method of terminating VPN tunnels in our data 
> center.  We're going to switch from IPSec L2L tunnels to GRE tunnels 
> with IPSec protection.  The big benefit is that it cuts our admin 
> overhead significantly.  It's also a hell of a lot easier to deploy. 
> Instead of having to have 6 lines of config for each remote customer 
> prefix I can simply set up an IGP in their VRF and let the customer 
> drive.  Much easier.

I received an off-list reply that solved the problem.  I didn't enable 
'mls mpls tunnel-recir' on the 7600.  I'm not certain exactly what it 
does to solve the problem but it works.  I'll research it later.

Thanks for the assistance
  Justin



More information about the cisco-nsp mailing list