Netopia 3300-ENT Series, Firmware User Manual

Page: 146 / 334

5-14 Firmware User Guide
VPN force-all
GRE tunnelling suppor ts “VPN force-all,” which forces all traffic coming from the LAN onto the GRE tunnel. You
accomplish this by setting the default route to go through the GRE tunnel. A secondar y host route where all
tunneled GRE packets route to the actual WAN inter face can be configured as a static route when required.
The following table outlines various force-all configurations for different networking scenarios; all other options
can safely use their default values:
Easy Setup System Configuration Menu
GRE Profile
Encapsulation
Menu
GRE Profile IP
Parameters Menu
Static WAN IP
IP =
some_IP_address
Mask =
some_IP_mask
Data Link
Encapsulation =
1483, 1490, HDLC,
PPP
IP Default Gateway =
127.0.0.2
Gateway Static Route:
Destination Network =
GRE
Remote_Tunnel_End_Point
Destination Netmask =
Remote_Tunnel_End_Point_
netmask
Next Gateway = local_WAN_IP
Remote Tunnel End
Point =
peer_tunnel_
IP_address
Remote Member IP
= 127.0.0.2
Remote Member
Mask cannot be
255.255.255.255
Dynamic WAN IP
IP = 0.0.0.0
Mask = 0.0.0.0
IP Default Gateway =
127.0.0.2
Gateway static route is
recommended
see above see above
Static PPPoE
Remote IP =
some_IP_address
Remote Mask =
some_IP_mask
see above see above see above
Auto PPPoE
Remote IP =
127.0.0.2
Remote Mask =
255.255.255.255
IP Default Gateway =
127.0.0.3
see above Remote Member IP
= 127.0.0.3
Remote Member
Mask cannot be
255.255.255.255
Note:
A GRE tunnel cannot transmit RIP routes over a force-all tunnel, or with a remote member IP with a
host par t of all zeros.