Route VLAN traffic between two locations with GRE tunneling (With EXOS)

  • 0
  • 1
  • Question
  • Updated 2 years ago
  • Answered
We have x460 extreme switches in two different locations connected with L3 networking. I would like some suggestions on extending the vlan from one location to the other over l3. When I read about this, I realized that one of my option is L2-GRE and EXOS does not support it. Can I do this configuration using L3-GRE tunneling?
Please provide me some guidance on this. 
Photo of Ashwini Balachandra

Ashwini Balachandra

  • 196 Points 100 badge 2x thumb

Posted 2 years ago

  • 0
  • 1
Photo of Jacob, Praveen

Jacob, Praveen, Employee

  • 1,022 Points 1k badge 2x thumb
Thanks for using the Extreme Community Forum. 

Please note that GRE tunneling of L3 traffic is possible in Extreme switches beginning EXOS 15.4 and above. 

Please refer to page nos. 1300-1301 (EXOS_User_guide - version 16.1.) for configuration guidance on this issue.

Please let us know if you have any further queries. 

Thanks,
Praveen Jo
(Edited)
Photo of Narayanan, Karthikeyan

Narayanan, Karthikeyan, Employee

  • 912 Points 500 badge 2x thumb
Hi Ashwini,

Yes. You are right. EXOS will not support L2-GRE mode. 

https://gtacknowledge.extremenetworks.com/articles/Q_A/Does-EXOS-support-L2-GRE-tunneling


Please find the below sample configuration for L3-GRE:
create vlan inet
configure vlan inet add port 24
configure vlan inet ipa 1.1.1.1/24
create vlan users
configure vlan users add port 1
configure vlan users ipa 100.0.0.1/24
create tunnel mytunnel gre destination 1.1.1.2 source 1.1.1.1
configure tunnel "mytunnel" ipaddress 2.0.0.1/24
configure iproute add 200.0.0.0/24 2.0.0.2
enable ipforwarding

Please let us know if you have any further queries.

Regards,
Karthikeyan
Photo of Tripathy, Priya Ranjan

Tripathy, Priya Ranjan, ESE

  • 2,306 Points 2k badge 2x thumb
Hello Ashwini,

For your further reference and awareness in the future please find below EXOS switches supporting Layer3 Tunneling:

Summit X460,X480,X650, X670 and E4G
BD8900 (G96T-c,10G24-x,G48T-XL, G48X-XL,10G8X-XL,40G6X-xm)
BDX8 (all I/O cards)

Coming to configuration i could see already Praveen and Karthikeyan have provided you the detailed sample configuration for  this application.

If still you need any further information then do let us know.
Photo of Ashwini Balachandra

Ashwini Balachandra

  • 196 Points 100 badge 2x thumb
Hello Guys, 

Thank you for your reply. The configuration setup example is helpful to understand this clearly.
I saw the configuration in the EXOS_User_guide 16.1 . I have a follow up question on this. I have attached a topology which I am trying to create. 


Can I create a GRE tunnel between these two routers which are on different subnets? I was not sure of this from the examples.
Photo of Narayanan, Karthikeyan

Narayanan, Karthikeyan, Employee

  • 912 Points 500 badge 2x thumb
Yes. We can. Please find the below sample config:

Switch 1:

create vlan "v1"
create vlan "v2"
configure vlan v1 add ports 23 untagged  
configure vlan v2 add ports 33 untagged  
configure vlan v1 ipaddress 10.0.0.1 255.0.0.0
enable ipforwarding vlan v1
configure vlan v2 ipaddress 20.0.0.1 255.0.0.0
enable ipforwarding vlan v2

create tunnel m1 gre destination 30.0.0.1 source 10.0.0.1
configure tunnel m1 ipaddress 1.0.0.1 255.255.255.0
configure iproute add 20.0.0.2 255.255.255.255 1.0.0.2 
configure ospf routerid 1.1.1.1
enable ospf
configure ospf add vlan v1 area 0.0.0.0  


Core:
 
create vlan "v1"
create vlan "v2"
configure vlan v1 add ports 28 untagged  
configure vlan v2 add ports 53 untagged  
configure vlan v1 ipaddress 10.0.0.2 255.0.0.0
enable ipforwarding vlan v1
configure vlan v2 ipaddress 30.0.0.2 255.0.0.0
enable ipforwarding vlan v2

enable ospf
configure ospf add vlan v1 area 0.0.0.0 
configure ospf add vlan v2 area 0.0.0.0

Switch3:

create vlan "v1"
create vlan "v2"
configure vlan v2 add ports 18 untagged  
configure vlan v1 add ports 17 untagged  
configure vlan v1 ipaddress 30.0.0.1 255.0.0.0
enable ipforwarding vlan v1
configure vlan v2 ipaddress 20.0.0.2 255.0.0.0
enable ipforwarding vlan v2
create tunnel m1 gre destination 10.0.0.1 source 30.0.0.1
configure tunnel m1 ipaddress 1.0.0.2 255.255.255.0
enable ipforwarding tunnel m1
configure iproute add 20.0.0.1 255.255.255.255 1.0.0.1
enable ospf
configure ospf add vlan v1 area 0.0.0.0 

So here we are reaching from sw1 to sw 3 by creating layer 3 GRE tunnel.

Please let me know if you need any more information

Regards,
Karthikeyan
Photo of Narayanan, Karthikeyan

Narayanan, Karthikeyan, Employee

  • 912 Points 500 badge 2x thumb
Are we trying to create a GRE tunnel between two extreme switches? or if any other hardware involved.
Photo of Narayanan, Karthikeyan

Narayanan, Karthikeyan, Employee

  • 912 Points 500 badge 2x thumb
I suppose you are trying to create tunnelling beween two x460 extreme switches. Then above sample config would be fine.

Please let us know if you need any further help on this?

Regards,
Karthikeyan
Photo of Ashwini Balachandra

Ashwini Balachandra

  • 196 Points 100 badge 2x thumb
Yes.. I am trying to create tunnel between two x460 extreme switches which are 
physically separated. Server in location 1 (no public IP address)needs to 
communicate to other end devices in location 2.
Thank you very much for all the support and configuration details.
Photo of Narayanan, Karthikeyan

Narayanan, Karthikeyan, Employee

  • 912 Points 500 badge 2x thumb
Thank you for the update. I think then the provided configuration will be enough for your requirement. Please let us know if you need any more information.

Regards,
Karthikeyan
Photo of Narayanan, Karthikeyan

Narayanan, Karthikeyan, Employee

  • 912 Points 500 badge 2x thumb
Hi Ashwani,

Did you get a chance to try the suggested configuration?

Regards,
Karthikeyan
Photo of Ashwini Balachandra

Ashwini Balachandra

  • 196 Points 100 badge 2x thumb
No I am doing these configurations tomorrow. Wasn't sure about ospf settings. Currently there are two x460 switches in different locations between which I am planning to create tunnel. I didn't understand the configuration in your example. Could you please explain how are the three switches connected?

Regards,
Ashwini
(Edited)
Photo of Narayanan, Karthikeyan

Narayanan, Karthikeyan, Employee

  • 912 Points 500 badge 2x thumb
Hi Ashwini,

In the given example the tunnel is over OSPF. I am not sure about your switches configuration. If possible please provide us the same. 

Our suggestion would be to create a GTAC case so that we can review the configuration and topology and will suggest you further.

Regards,
Karthikeyan
Photo of Narayanan, Karthikeyan

Narayanan, Karthikeyan, Employee

  • 912 Points 500 badge 2x thumb
Topology is same as you have. SW1 in location A -- Core ----SW2 in location B.
And we create a tunnel between SW1 and SW2.
Photo of Ashwini Balachandra

Ashwini Balachandra

  • 196 Points 100 badge 2x thumb
Hi Karthikeyan,

Was trying to configure today and I realized that GRE tunneling doesn't support on virtual router. Is it supported in later versions of EXOS 16.1?

Regards,
Ashwini
Photo of Tripathy, Priya Ranjan

Tripathy, Priya Ranjan, ESE

  • 2,306 Points 2k badge 2x thumb
As discussed earlier following set of Hardware supporting this feature:

Summit X460,X480,X650, X670 and E4G
BD8900 (G96T-c,10G24-x,G48T-XL, G48X-XL,10G8X-XL,40G6X-xm)
BDX8 (all I/O cards) 

Note:

Provided all blades in the chassis or nodes in a stack need to support GRE tunnels or else the feature cannot be configured or enabled.

Not sure in your scenario if you are using any stack X460 switch or stand alone switch to achieve this. If any stack switch then the above point needs to be considered.

Coming to the recommended software version for this hardware(X460) : Exos16.1.3.6p1-9 is currently in use.
Photo of Narayanan, Karthikeyan

Narayanan, Karthikeyan, Employee

  • 912 Points 500 badge 2x thumb
Hi Ashwani,

Are you trying to configure GRE tunnel on a default VR or a different VR?

Regards,
Karthikeyan
Photo of Ashwini Balachandra

Ashwini Balachandra

  • 196 Points 100 badge 2x thumb
On user created VR.. looks like it's not supported in 16.1 EXOS release
Photo of Tripathy, Priya Ranjan

Tripathy, Priya Ranjan, ESE

  • 2,306 Points 2k badge 2x thumb
Actually GRE tunnels are IP tunnels which require L3 Function. L3 features are supported with EDGE license and above. All of the supported platforms' default license is EDGE or above, which include L3 features. In a stack all of the nodes must be GRE capable if we are using any stack switches. For GRE in a stack, all stack nodes must be GRE hardware capable. Hence first please check the license type for the concerned switch. Use command: show license to check this.
Photo of Narayanan, Karthikeyan

Narayanan, Karthikeyan, Employee

  • 912 Points 500 badge 2x thumb
Hi Ashwini,

Thank you for the reply. If possible can you please provide us the configuration of the switch?
Tunnel can be created on L3 . so In the existing setup, Do you have layer 3 routing on a default VR and the tunnel on other VR?

Can you please clarify on this?

Regards,
Karthikeyan
Photo of Narayanan, Karthikeyan

Narayanan, Karthikeyan, Employee

  • 912 Points 500 badge 2x thumb
Hi Ashwini,

As per the provided topology, you try to reach from 100.0.0.0 to 200.0.0.0. if that's the case do we have those VLANs and the GRE tunnel are in the same VR?

For better understanding please provide us the configuration of the those two x460 switches.

Regards,
Karthikeyan
Photo of Ashwini Balachandra

Ashwini Balachandra

  • 196 Points 100 badge 2x thumb
Yes we have the Vlan and GRE tunnels in the same VR and it seems to me that I wont be able to configure this on user created VR