Junos
Junos

IP-over-IP tunnel. Configuration example and guidelines. (IP-IP, ipip, IP tunneling)

10.03.08   |  
‎10-03-2008 01:20 AM

Hi, All !!

 

I need configure simple IP over IP tunnel (without IPSec and etc), but can not find  any configuration examples and guidelines.

Help, please!! 

5 REPLIES
Junos
Solution
Accepted by topic author alexart
‎08-26-2015 01:27 AM

Re: IP-over-IP tunnel. Configuration example and guidelines. (IP-IP, ipip, IP tunneling)

10.03.08   |  
‎10-03-2008 12:30 PM

First of all you need a tunnel /as/ linkservices pic

 

We use this config for IPv6 in a IP / IP tunnel.

 

show configuration interfaces ip-1/2/0


unit 0 {
    description "TO:IPv6 over IPv4 tunnel ";
    tunnel {
        source 193.x.x.x;
        destination 4.x.x.x;
    }
    family inet6 {
        address 20x.x.x.x/126;
    }
}

Junos

Re: IP-over-IP tunnel. Configuration example and guidelines. (IP-IP, ipip, IP tunneling)

02.06.10   |  
‎02-06-2010 06:56 AM

Hi, can you explain better how should a tunnel /as/ linkservices pic be configured?

I need to do the same thing (ipip tunnel) on a J2350.

 

thanks!

Junos

Re: IP-over-IP tunnel. Configuration example and guidelines. (IP-IP, ipip, IP tunneling)

02.08.10   |  
‎02-08-2010 07:39 AM

Just configure the previous bit under ip-0/0/0 (or gr-0/0/0 for GRE). Both J and SRX series routers deal with that by default.

 

Junos

Re: IP-over-IP tunnel. Configuration example and guidelines. (IP-IP, ipip, IP tunneling)

[ Edited ]
01.20.11   |  
‎01-20-2011 02:07 PM

Hi All,

 

I configured the following on my srx210 - version 10.3R2.11;

brian@FW02# show interfaces ip-0/0/0
traceoptions {
    flag all;
}
unit 0 {
    tunnel {
        source 1.1.1.1;
        destination 1.1.1.2;
    }
    family inet6 {
        address 2001:610:123::2/64;
    }
}

My IPv6 traffic all worked fine untill I upgraded to 10.4r1.19, Now IPv6 trough the tunnel stopped wotrking...

 

Thanks,

Brian

Junos

Re: IP-over-IP tunnel. Configuration example and guidelines. (IP-IP, ipip, IP tunneling)

01.21.11   |  
‎01-21-2011 08:33 AM

yes flow-based IPv6 traffic using an HE tunnel got broken in 10.4R1, yet runs just fine in 10.3R2.  Packet-based IPv6 will work in 10.4 with an HE tunnel though.  But you get no stateful inspection, etc.  There are two threads about this in the SRX forum --

 

HE IPv6 tunnel in 10.4 not working

 

10.4 is out - this one has stuff about IPv6 HE tunnel not working later on in the thread.

 

it's unfortunate since I believe 10.4 added a whole bunch of IPv6 features...I suspect a lot of people using IPv6 today on SRXs are testing it out and putting it through its paces before deployment with HE tunnels, so now they have no way of testing those new IPv6 features.

 

Maybe 10.4R2 will fix it....

 

 

Cheers,

 

Will