SRX Services Gateway
SRX Services Gateway

GRE Keepalive

‎08-14-2019 01:03 AM


I try to monitor GRE status. The output are below 

Logical interface gr-0/0/0.0 (Index 76) (SNMP ifIndex 535)
Flags: Hardware-Down Up Point-To-Point SNMP-Traps 0x0 IP-Header
Encapsulation: GRE-NULL
Copy-tos-to-outer-ip-header: Off, Copy-tos-to-outer-ip-header-transit: Off
Gre keepalives configured: On, Gre keepalives adjacency state: up
Input packets : 10716
Output packets: 10711
Security: Zone: tunnel
Allowed host-inbound traffic : bootp bfd bgp dns dvmrp igmp ldp msdp nhrp ospf pgm pim rip router-discovery rsvp sap vrrp dhcp
finger ftp tftp ident-reset http https ike netconf ping reverse-telnet reverse-ssh rlogin rpm rsh snmp snmp-trap ssh telnet
traceroute xnm-clear-text xnm-ssl lsping ntp sip r2cp webapi-clear-text webapi-ssl tcp-encap sdwan-appqoe
Protocol inet, MTU: 1400
Max nh cache: 0, New hold nh limit: 0, Curr nh cnt: 0, Curr new hold cnt: 0, NH drop cnt: 0
Flags: Sendbcast-pkt-to-re, User-MTU
Addresses, Flags: Dest-route-down Is-Preferred Is-Primary
Destination:, Local:, Broadcast:


Gre keepalives configured: On,

Gre keepalives adjacency state: up < What's meaning for this?  Gre keepalives adjacency state always is up even gr interface (gr-0/0/0) down

SRX Services Gateway

Re: GRE Keepalive

‎08-14-2019 01:24 AM

Hi Halo,


Please refer the following technical documentation for GRE Keepalive Time -


Also, note that, When the hold time expires,

  • The GRE tunnel will stay up even though the interface cannot send or receive traffic.

  • The Link status will be Up and the Gre keepalives adjacency state will be Down.

Please, Mark My Solution Accepted if it Helped, Kudos are Appreciated too!!!
SRX Services Gateway

Re: GRE Keepalive

‎08-14-2019 07:54 AM

Hi Halo,

Is this GRE configured over IPSec on SRX platform?

Can you please share following two output

show version brief
 show oam gre-keepalive interface-name gr-0/0/0.0


SRX Services Gateway

Re: GRE Keepalive

‎08-14-2019 04:04 PM



As per Juniper documentation the keepalives are processed by the RE. I believe one reason that could explain the behavior could be that the keepalives can still be sent via the underlying interfaces of the GRE interface. These will be the interfaces configured with the IPs highlighted below.


gr-0/0/0 {
    unit 0 {
        tunnel {
        family inet {


Hence even though the GRE interface is down, the keepalive adjacency state will be up because the keepalives can be still sent without problems.


Can you bring down one physical interface and confirm if the keepalive adjacency still shows up?


Please mark this comment as the Solution if applicable
SRX Services Gateway

Re: GRE Keepalive

‎08-20-2019 11:59 PM

Hi Halo, were you able to confirm the results of the suggested test?


Please mark my answer as the Solution if it applies.
SRX Services Gateway

Re: GRE Keepalive

‎08-21-2019 06:51 AM

I think status might be lately update a bit becuase of keepalive time. However, I will try again and let you know all output and result by next week.