tunnel-protocol

Function

The tunnel-protocol command specifies the tunnel encapsulation protocol.

The undo tunnel-protocol command restores the default encapsulation protocol (None).

Format

tunnel-protocol gre [ p2mp ]

tunnel-protocol ipsec

tunnel-protocol ipv4-ipv6 [ ds-lite ]

tunnel-protocol ipv6-ipv4 [ 6rd | 6to4 | auto-tunnel | isatap ]

tunnel-protocol none

undo tunnel-protocol

Parameters

Parameter	Description	Value
gre [ p2mp ]	Set the tunnel encapsulation protocol to GRE. GRE tunnels can be point-to-point (P2P) or point-to-multipoint (P2MP) tunnels. If parameter p2mp is specified, a P2MP GRE tunnel is established. The P2MP GRE tunnel is also called an MGRE tunnel. If parameter p2mp is not specified, a P2P GRE tunnel is established. MGRE tunnels must be established on a DSVPN. Therefore, you must use the p2mp parameter.	-
ipsec	Set the tunnel encapsulation protocol to IPSec.	-
ipv4-ipv6 [ ds-lite ]	Indicates that the encapsulation type on the tunnel interface is IPv4 over IPv6 and that the tunnel is manually configured. ds-lite: Indicates that the tunnel is a ds-lite tunnel. Only the USG6510E/6510E-POE/6530E do not support this parameter.	-
ipv6-ipv4 [ 6rd \| 6to4 \| auto-tunnel \| isatap ]	Indicates that the encapsulation type on the tunnel interface is IPv6 over IPv4. If none of the following parameters are specified, the tunnel is manually configured and is a point-to-point tunnel. 6rd: Indicates that the tunnel is a 6RD tunnel. The 6RD tunnel is a point-to-multipoint tunnel. 6to4: Indicates that the tunnel is a 6to4 tunnel. The 6to4 tunnel is a point-to-multipoint tunnel. auto-tunnel: indicates that the tunnel is an automatic tunnel using IPv4-compatible IPv6 addresses. The automatic tunnel is a point-to-multipoint tunnel. isatap: indicates that the tunnel is an ISATAP tunnel. Manual tunnels are point-to-point tunnels, and 6RD, 6to4, and automatic tunnels are point-to-multipoint tunnels. Only one automatic tunnel can be created on a node. Only the USG6510E/6510E-POE/6530E do not support this parameter.	-
none	Set the encapsulation type on the tunnel interface to NONE. NONE is the initial setting of a tunnel interface, which means that no other encapsulation is used.	-

Views

Tunnel interface view

Default Level

2: Configuration level

Usage Guidelines

Tunnel interface is a logical interface for packet encapsulation. A new tunnel interface provides only packet encapsulation function and does not use any extra protocol (NONE) to encapsulate the packets. You can specify a protocol as the encapsulation protocol, such as GRE and IPSec.

You must specify the tunneling protocol before specifying other parameters, such as source and destination tunnel addresses. Changing the encapsulation protocol of a tunnel will delete all other settings of the tunnel.

The tunnel interface supports ISIS only when tunnel-protocol is set to GRE.

Example

# Apply a tunnel policy in the Tunnel0 interface view to configure a GRE tunnel.

<sysname> system-view
[sysname] interface tunnel 0
[sysname-Tunnel0] tunnel-protocol gre