GigaSMART IP Encapsulation/Decapsulation (GigaSMART Tunnel)

Use GigaSMART encapsulation and decapsulation operations to send traffic arriving on one GigaSMART-enabled node over the Internet to a second GigaSMART-enabled node. There, the traffic is decapsulated and made available to local tool ports.

Refer to the “GigaSMART IP Encapsulation/Decapsulation (GigaSMART Tunnel)” section in the GigaVUE Fabric Management Guide for details about GigaSMART IP Encapsulation/Decapsulation details.

The following example describes how to configure the sending end of the tunnel for the physical devices in different location.

Configure the Sending End of the Tunnel: GigaVUE‑HC1 in Reno

The GigaVUE‑HC1 in this location has an IP interface configured on tool port 1/1/g1 with an IP address of 11.1.9.75. Maps to this port that use a tunnel encapsulation GigaSMART operation can send data over the Internet. The following table summarizes the commands necessary to configure the sending end of the tunnel in the CLI:

Task

Commands

Start by designating port 1/1/g1 as a tool port.

(config) # port 1/1/g1 type tool

Configure a GigaSMART group and associate it with a GigaSMART engine port.

(config) # gsgroup alias gsport1 port-list 1/1/e1

Use the ip interfaces command to set up the network parameters for 1/1/g1. This command sets the IP address, subnet mask, default gateway, and MTU for the IP interface with tool port on port 1/1/g1. Notice that the GigaSMART group in this example has the alias gsport1.

(config) # ip interface alias test

(config ip interface alias test) # attach 1/1/g1

(config ip interface alias test) # ip address 11.1.9.75/29

(config ip interface alias test) # gw 11.1.9.1

(config ip interface alias test) # mtu 9400

(config ip interface alias test) # gsgroup add gsport1

(config ip interface alias test) # exit

Now, create a tunnel encapsulation GigaSMART operation (tunnelenc) that will send traffic to IP address 21.2.9.75 on destination UDP port 10000 from source leader in a bidirectional clock relationship (formerly master) port 5000. The operation has the alias tunnelenc.

config) # gsop alias tunnelenc tunnel-encap type gmip portsrc 5000 portdst 10000 ipdst 21.2.9.75 prec 1 port-list gsport1

Once we have our tunnel encapsulation operation, we can include it as part of a map rule. This map rule matches IPv4 packets and sends them to 21.2.9.75:10000 (the socket specified by the GigaSMART operation named tunnelencap we created in the previous step).

(config) # map alias tunnelencap

(config map alias tunnelencap) # type regular byRule

(config map alias tunnelencap) # use gsop tunnelenc

(config map alias tunnelencap) # to 1/1/g1

(config map alias tunnelencap) # from 1/1/x3

(config map alias tunnelencap) # rule add pass ipver 4

(config map alias tunnelencap) # exit

Configure the Receiving End of the Tunnel: GigaVUE‑HC2 with GigaSMART in San Francisco

Now we need to configure the receiving end of the tunnel with an IP interface associated with the network port. The GigaVUE‑HC2 in this location will have an IP interface associated with the network port configured on network port 5/1/c2 with an IP address of 21.2.9.75 and a GigaSMART decapsulation operation that listens on UDP port 10000.

The following table summarizes the commands necessary to configure the receiving end of the tunnel in the CLI:

Task

Commands

Start by designating port 5/1/c2 as a network port.

(config) # port 5/1/c2 type network

Configure a GigaSMART group and associate it with a GigaSMART engine port.

(config) # gsgroup alias gsport5 port-list 1/1/e1

Use the ip interfaces command to set up the network parameters for 5/1/c2. This command sets the IP address, subnet mask, default gateway, and MTU for the IP interface associated with the network port on port 5/1/c2. Note that this port uses the same IP address to which the GSOP in Reno is configured to send data (21.2.9.75).

(config) # ip interface alias test

(config ip interface alias test) # attach 5/1/c2

(config ip interface alias test) # ip address 21.2.9.75/29

(config ip interface alias test) # gw 21.2.9.1

(config ip interface alias test) # mtu 9400

(config ip interface alias test) # gsgroup add gsport5

(config ip interface alias test) # exit

Now, create a tunnel decapsulation GigaSMART operation (tunnel-decap) that will decapsulate traffic received on UDP port 10000. Recall that we configured the sending end of the tunnel to send to that UDP port. The operation has the alias hc-decap1.

(config) # gsop alias hc-decap1 tunnel-decap type gmip portdst 10000 port-list gsport5

Once we have our tunnel decapsulation operation, we can include it as part of a map rule. This map decapsulates all traffic arriving at 5/1/c2 from IP address 21.2.9.25 (the start of the tunnel) and sends it to port 1/1/c2. This is a tool port on the chassis with box ID 1 in this cluster.

(config) # map alias decapper1

(config map alias decapper1) # type regular byRule

(config map alias decapper1) # use gsop hc-decap1

(config map alias decapper1) # to 1/1/c2

(config map alias decapper1) # from 5/1/c2

(config map alias decapper1) # rule add pass ipsrc 11.1.9.75 255.255.255.0

(config map alias decapper1) # exit

Configure the Receiving End of the Tunnel: GigaVUE H Series with GigaSMART in Melbourne

Now we need to configure the receiving end of the tunnel with an IP interface associated with the network port. The GigaVUE H Series in this location will have an IP interface associated with the network port configured on network port 1/1/3 with an IP address of 10.150.68.222 and a GigaSMART decapsulation operation that listens on UDP port 10000.

The following table summarizes the commands necessary to configure the receiving end of the tunnel in the CLI:

Task

Commands

Start by designating port 1/1/x3 as a network port associated with an IP interface, configuring its IP profile, and add the required GigaSMART group to the IP interface. This command sets the IP address, subnet mask, default gateway, and MTU for the IP interface with tool port on port 1/1/x3.

(config) # ip interface alias test

(config ip interface alias test) # attach 1/1/x3

(config ip interface alias test) # ip address 10.150.68.222 /32

(config ip interface alias test) # gw 10.150.68.1

(config ip interface alias test) # mtu 9400

(config ip interface alias test) # gsgroup add gs2

(config ip interface alias test) # exit

Now, create an IP decapsulation GigaSMART operation (gv_ipdecap) that will decapsulate traffic received on UDP port 10000. Recall that we configured the sending end of the tunnel to send to that UDP port. The operation has the alias gv_ipdecap.

Note that this operation uses the same GigaSMART group (GS2) as the network port associated with the IP interface we set up in the first step.

(config) # gsop alias gv_ipdecap tunnel-decap type gmip portdst 10000 port-list GS2

Once we have our IP decapsulation operation, we can include it as part of a map.

■   The map alias command opens the map prefix mode with a map named decapper.
■   The from command specifies the ingress ports for this map.
■   The use gsop command applies the gv_ipdecap GigaSMART operation to all packets matching the rules in the map, decapsulating them from the tunnel.
■   The to command specifies where matching packets will be sent (tool port 1/1/x11).
■   The rule add pass command specifies that packets arriving on this port with an IP Source address of 10.10.10.10 /32 will be processed by the gv_ipdecap GSOP and sent to tool port 1/1/x11.

(config) # map alias decapper

(config map alias decapper) # type regular byRule

(config map alias decapper) # from 1/1/x3

(config map alias decapper) # use gsop gv_ipdecap

(config map alias decapper) # to 1/1/x11

(config map alias decapper) # rule add pass ipsrc 10.10.10.10 /32

(config map alias decapper) # exit

(config) #