ScreenOS Firewalls (NOT SRX)
ScreenOS Firewalls (NOT SRX)

GRE(not over IPSec) tunnel troubleshooting

04.20.17   |  
‎04-20-2017 03:35 AM

Hi,

How to troubleshoot/Debug a GRE tunnel(not over IPSec) on SSG140?

Thank you,

tcp

2 REPLIES
ScreenOS Firewalls (NOT SRX)

Re: GRE(not over IPSec) tunnel troubleshooting

04.22.17   |  
‎04-22-2017 06:03 AM

Hello,

 

Is it a pass through GRE or a GRE tunneling on the firewall itself? 

 

For pass through GRE use d"debug flow basic " with proper flow filters.

 

For Gre generic tunneling, please use " debug gt gre " option

 

Hope it helps your requirement.

 

Regards

vatsa

ScreenOS Firewalls (NOT SRX)

Re: GRE(not over IPSec) tunnel troubleshooting

04.22.17   |  
‎04-22-2017 06:14 AM

Looking through the ScreenOS 6.3 Concepts and Examples guide, the only mention of using GRE is when bound to tunnel interfaces on the device.  So I believe you only can use this with GRE over IPSEC as a result.

 

http://www.juniper.net/techpubs/software/screenos/screenos6.3.0/630_ce_all.pdf

Steve Puluka BSEET
Juniper Ambassador
Senior IP Engineer - DQE Communications Pittsburgh, PA (Metro Ethernet & ISP)
JNCIA-Junos JNCIS-SEC JNCIP-SEC JNCSP-SEC
JNCIS-FWV
JNCDA JNCDS-DC JNCDS-SEC
JNCIS-SP
ACE PanOS 6 ACE PanOS 7
http://puluka.com/home