[c-nsp] Troubleshooting a GRE tunnel terminated in a MPLS VPN
Justin Shore
justin at justinshore.com
Mon Nov 24 08:52:25 EST 2008
Justin Shore wrote:
> I'm testing a different method of terminating VPN tunnels in our data
> center. We're going to switch from IPSec L2L tunnels to GRE tunnels
> with IPSec protection. The big benefit is that it cuts our admin
> overhead significantly. It's also a hell of a lot easier to deploy.
> Instead of having to have 6 lines of config for each remote customer
> prefix I can simply set up an IGP in their VRF and let the customer
> drive. Much easier.
I received an off-list reply that solved the problem. I didn't enable
'mls mpls tunnel-recir' on the 7600. I'm not certain exactly what it
does to solve the problem but it works. I'll research it later.
Thanks for the assistance
Justin
More information about the cisco-nsp
mailing list