SRX

Hello,

I try to create a GRE tunnel inside of IPSec between two SRX Active/Passive clusters.

I can ping the reth interfaces and I can ping tunnel st interfaces - everything is fine so far.

However the GRE tunnels do not seem to pass traffic at all, and I cannot ping the gr interfaces' IP addresses.

I know that on the Junos 11.1 the GRE tunnels indeed did not work. The release notes say that it is not supported: 

http://www.juniper.net/techpubs/en_US/junos11.1/information-products/topic-collections/release-notes/11.1/index.html

"gr-0/0/0—Generic routing encapsulation (GRE) and tunneling is not supported."

However, the release notes for Junos 11.4 have the above statement removed:

http://www.juniper.net/techpubs/en_US/junos11.4/information-products/topic-collections/release-notes/11.4/index.html

Is GRE supported on SRX clusters in Junos 11.4, as the release notes suggest?

Or is it a mistake by Juniper and GRE tunnels still are not possible on SRX clusters? 

Kind regards,

cad 

Have a look here:

http://www.juniper.net/techpubs/en_US/junos11.2/information-products/topic-collections/release-notes/11.2/index.html?topic-57400.html

The release note in 11.2 lists GRE support for the HE SRX "in addition to existing support on Branch SRX".

Yeah, I guess I missed that.

So GRE should be supported and it seems I'm doing something wrong.

Gonna take another look at my configuration.

Thanks for your help,

cad