Skip to content

VPN Interface GRE Feature Template

Configure a standard GRE interface, the interface name, the admin status, the tunnel source interface / ip address, the tunnel destination, the IP maximum transmission unit (MTU), the Transmission Control Protocol maximum segment size (TCP MSS), and more.

Diagram

Diagram

Classes

edge_feature_templates (sdwan)

NameTypeConstraintMandatoryDefault Value
gre_interface_templatesList[gre_interface_templates]No

gre_interface_templates (sdwan.edge_feature_templates)

NameTypeConstraintMandatoryDefault Value
nameStringRegex: ^[^<>!&" ]{1,128}$Yes
descriptionStringYes
device_typesListChoice[ASR-1001-HX, ASR-1001-X, ASR-1002-HX, ASR-1002-X, ASR-1006-X, C1101-4P, C1101-4PLTEP, C1101-4PLTEPW, C1109-2PLTEGB, C1109-2PLTEUS, C1109-2PLTEVZ, C1109-4PLTE2P, C1109-4PLTE2PW, C1111-4P, C1111-4PLTEEA, C1111-4PLTELA, C1111-4PW, C1111-8P, C1111-8PLTEEA, C1111-8PLTEEAW, C1111-8PLTELA, C1111-8PLTELAW, C1111-8PW, C1111X-8P, C1112-8P, C1112-8PLTEEA, C1112-8PLTEEAWE, C1112-8PWE, C1113-8P, C1113-8PLTEEA, C1113-8PLTEEAW, C1113-8PLTELA, C1113-8PLTELAWZ, C1113-8PLTEW, C1113-8PM, C1113-8PMLTEEA, C1113-8PMWE, C1113-8PW, C1116-4P, C1116-4PLTEEA, C1116-4PLTEEAWE, C1116-4PWE, C1117-4P, C1117-4PLTEEA, C1117-4PLTEEAW, C1117-4PLTELA, C1117-4PLTELAWZ, C1117-4PM, C1117-4PMLTEEA, C1117-4PMLTEEAWE, C1117-4PMWE, C1117-4PW, C1118-8P, C1121-4P, C1121-4PLTEP, C1121-8P, C1121-8PLTEP, C1121-8PLTEPW, C1121X-8P, C1121X-8PLTEP, C1121X-8PLTEPW, C1126-8PLTEP, C1126X-8PLTEP, C1127-8PLTEP, C1127-8PMLTEP, C1127X-8PLTEP, C1127X-8PMLTEP, C1128-8PLTEP, C1131-8PLTEPW, C1131-8PW, C1131X-8PLTEPW, C1131X-8PW, C1161-8P, C1161-8PLTEP, C1161X-8P, C1161X-8PLTEP, C8000V, C8200-1N-4T, C8200L-1N-4T, C8300-1N1S-4T2X, C8300-1N1S-6T, C8300-2N2S-4T2X, C8300-2N2S-6T, C8500-12X, C8500-12X4QC, C8500-20X6C, C8500L-8S4X, IR-1101, IR-1821, IR-1831, IR-1833, IR-1835, IR-8140H, IR-8140H-P, IR-8340, ISR-4221, ISR-4221X, ISR-4321, ISR-4331, ISR-4351, ISR-4431, ISR-4451-X, ISR-4461, ISR1100-4G-XE, ISR1100-4GLTEGB-XE, ISR1100-4GLTENA-XE, ISR1100-6G-XE, ISR1100X-4G-XE, ISR1100X-6G-XE]No
interface_nameStringRegex: ^(gre[0-9]{0,3})$No
interface_name_variableStringRegex: ^[^"~$&+,]255$`No
interface_descriptionStringNo
interface_description_variableStringRegex: ^[^"~$&+,]255$`No
shutdownBooleantrue, falseNo
shutdown_variableStringRegex: ^[^"~$&+,]255$`No
tunnel_source_interfaceStringNo
tunnel_source_interface_variableStringRegex: ^[^"~$&+,]255$`No
tunnel_source_ipIPNo
tunnel_source_ip_variableStringRegex: ^[^"~$&+,]255$`No
tunnel_destinationIPNo
tunnel_destination_variableStringRegex: ^[^"~$&+,]255$`No
ip_addressIPNo
ip_address_variableStringRegex: ^[^"~$&+,]255$`No
ip_mtuIntegermin: 64, max: 18000No
ip_mtu_variableStringRegex: ^[^"~$&+,]255$`No
tcp_mssIntegermin: 500, max: 1460No
tcp_mss_variableStringRegex: ^[^"~$&+,]255$`No
clear_dont_fragmentBooleantrue, falseNo
clear_dont_fragment_variableStringRegex: ^[^"~$&+,]255$`No
rewrite_ruleStringmax: 128No
rewrite_rule_variableStringRegex: ^[^"~$&+,]255$`No
ipv4_egress_access_listStringNo
ipv4_egress_access_list_variableStringRegex: ^[^"~$&+,]255$`No
ipv4_ingress_access_listStringNo
ipv4_ingress_access_list_variableStringRegex: ^[^"~$&+,]255$`No
trackerStringNo
tracker_variableStringRegex: ^[^"~$&+,]255$`No
applicationChoicenone, sigNo
application_variableStringRegex: ^[^"~$&+,]255$`No

Examples

Example-1: This example shows how to configure GRE interface feature template with interface name, interface description as variable, admin state (shutdown), tunnel source interface name, tunnel destination ip address, ip address of interface, ip mtu, tcp mss, clear dont fragment, rewrite rule, ipv4 ingress and egress access list, tracker and application.

sdwan:
edge_feature_templates:
gre_interface_templates:
- name: FT-CEDGE-GRE101-V01
description: "GRE Tunnel #1"
interface_name: gre1
interface_description: "GRE tunnel to Site #2"
shutdown: false
tunnel_source_interface: Ge1/0
tunnel_destination: 10.10.33.2
ip_address: 10.10.10.1/30
ip_mtu: 1500
tcp_mss: 1460
clear_dont_fragment: true
rewrite_rule: REWRITE-RULE-MPLS
ipv4_egress_access_list: QOS_ACL_OUT
ipv4_ingress_access_list: QOS_ACL_IN
tracker: 1
application: sig

Example-2: This example shows how to configure two GRE tunnel interfaces for primary and backup connections to zScaler SIG. It uses variables for GRE tunnel source interface and IP address and GRE tunnel destination IP. It uses a variable for shutdown for ease of operation. It uses adjusted IP MTU and TCP MSS to cater for GRE and TCP/IP headers respectively.

sdwan:
edge_feature_templates:
gre_interface_templates:
- name: VPN0-ZScaler-GRE-Tunnel1
description: ZScaler Tunnel1
interface_name: gre1
interface_description: Tunnel 1 Interface to ZScaler
shutdown_variable: gre1_shut
tunnel_source_interface_variable: zscaler_gre_tunnel1_source_interface
tunnel_destination_variable: zscaler_gre_tunnel1_destination
ip_address_variable: zscaler_tunnel1_ipv4_address
ip_mtu: 1476
tcp_mss: 1436
- name: VPN0-ZScaler-GRE-Tunnel2
description: ZScaler Tunnel2
interface_name: gre2
interface_description: Tunnel 2 Interface to ZScaler
shutdown_variable: gre2_shut
tunnel_source_interface_variable: zscaler_gre_tunnel2_source_interface
tunnel_destination_variable: zscaler_gre_tunnel2_destination
ip_address_variable: zscaler_tunnel2_ipv4_address
ip_mtu: 1476
tcp_mss: 1436