{"id":6601,"date":"2022-03-03T14:15:42","date_gmt":"2022-03-03T22:15:42","guid":{"rendered":"https:\/\/www.xh86.me\/?p=6601"},"modified":"2022-03-03T14:15:42","modified_gmt":"2022-03-03T22:15:42","slug":"gre%e9%9a%a7%e9%81%93%e4%b9%9f%e8%83%bd%e5%ae%9e%e7%8e%b0%e4%b8%a4%e7%ab%af%e9%85%8d%e7%bd%ae%e7%9b%b8%e5%90%8c%e5%ad%90%e7%bd%91%e4%ba%86","status":"publish","type":"post","link":"https:\/\/www.xh86.me\/?p=6601","title":{"rendered":"GRE\u96a7\u9053\u4e5f\u80fd\u5b9e\u73b0\u4e24\u7aef\u914d\u7f6e\u76f8\u540c\u5b50\u7f51\u4e86"},"content":{"rendered":"
\n

\u524d\u9762\u7528\u4e24\u7bc7\u6587\u7ae0\u4ecb\u7ecd\u4e86GRE\uff08Generic Routing Encapsulation\uff0c\u901a\u7528\u8def\u7531\u5c01\u88c5\uff09\u534f\u8bae\uff0c\u5206\u522b\u662f\uff08GRE\uff1aRFC1701-\u901a\u7528\u8def\u7531\u5c01\u88c5 (GRE)\uff09\u548c\uff08RFC1702:\u57fa\u4e8eIPv4 \u7f51\u7edc\u7684\u901a\u7528\u8def\u7531\u5c01\u88c5(GRE)\uff09\u3002\u9996\u5148\u56de\u987e\u4e00\u4e0b\uff1a<\/p>\n

GRE\u534f\u8bae\u7528\u6765\u5bf9\u67d0\u79cd\u534f\u8bae\uff08\u5982IP\u3001MPLS\u3001\u4ee5\u592a\u7f51\uff09\u7684\u6570\u636e\u62a5\u6587\u8fdb\u884c\u5c01\u88c5\uff0c\u4f7f\u8fd9\u4e9b\u88ab\u5c01\u88c5\u7684\u6570\u636e\u62a5\u6587\u80fd\u591f\u5728\u53e6\u4e00\u4e2a\u7f51\u7edc\uff08\u5982IP\uff09\u4e2d\u4f20\u8f93\u3002\u5c01\u88c5\u524d\u540e\u6570\u636e\u62a5\u6587\u7684\u7f51\u7edc\u5c42\u534f\u8bae\u53ef\u4ee5\u76f8\u540c\uff0c\u4e5f\u53ef\u4ee5\u4e0d\u540c\u3002\u5c01\u88c5\u540e\u7684\u6570\u636e\u62a5\u6587\u5728\u7f51\u7edc\u4e2d\u4f20\u8f93\u7684\u8def\u5f84\uff0c\u79f0\u4e3aGRE\u96a7\u9053\u3002GRE\u96a7\u9053\u662f\u4e00\u4e2a\u865a\u62df\u7684\u70b9\u5230\u70b9\u7684\u8fde\u63a5\uff0c\u5176\u4e24\u7aef\u7684\u8bbe\u5907\u5206\u522b\u5bf9\u6570\u636e\u62a5\u6587\u8fdb\u884c\u5c01\u88c5\u53ca\u89e3\u5c01\u88c5\u3002<\/p>\n

\u5148\u914d\u7f6e\u4e00\u4e2a\u7b80\u5355\u7684\u201cGRE over IPv4\u96a7\u9053<\/strong>\u201d\u5b9e\u9a8c\u3002<\/p>\n

\n
\n
\n
<\/div><\/section>\n
\u7ec4\u7f51\u9700\u6c42<\/strong><\/section>\n
<\/div><\/section>\n<\/section>\n<\/section>\n<\/section>\n

RT2\u548cRT4\u5206\u522b\u8fde\u63a5IPv4\u79c1\u6709\u7f51\u7edcSUBNET 1\u548cSUBNET 5\u3002\u8fd9\u4e24\u4e2a\u79c1\u6709\u7f51\u7edc\u90fd\u4f7f\u7528\u79c1\u7f51\u5730\u5740\u3002\u901a\u8fc7\u5728RT2\u548cRT4\u4e4b\u95f4\u5efa\u7acbGRE\u96a7\u9053\uff0c\u5b9e\u73b0\u4e24\u4e2a\u79c1\u6709\u7f51\u7edc\u7684\u4e92\u8054\u3002<\/p>\n

\n
\n
\n
<\/div><\/section>\n
\u7ec4\u7f51\u62d3\u6251<\/strong><\/section>\n
<\/div><\/section>\n<\/section>\n<\/section>\n<\/section>\n

<\/div><\/p>\n
\n
\n
\n
<\/div><\/section>\n
\u914d\u7f6e\u6b65\u9aa4<\/strong><\/section>\n
<\/div><\/section>\n<\/section>\n<\/section>\n<\/section>\n

GRE\u7684\u914d\u7f6e\u6bd4\u8f83\u7b80\u5355\uff0c\u4e00\u822c\u53ea\u6709\u4e24\u6b65\uff1a<\/p>\n

\n

1\u3001\u914d\u7f6eGRE\u96a7\u9053\u3002\u914d\u7f6e\u96a7\u9053\u63a5\u53e3\u5730\u5740\uff0c\u5e76\u6307\u5b9a\u96a7\u9053\u63a5\u53e3\u7684\u6e90\u76ee\u7aef\u5730\u5740\u5373\u53ef\u3002<\/p>\n

2\u3001\u914d\u7f6e\u8def\u7531\u5c06\u6d41\u91cf\u5f15\u5230\u96a7\u9053\u63a5\u53e3\u3002<\/p>\n<\/blockquote>\n

\u5404\u8bbe\u5907\u914d\u7f6e\u547d\u4ee4\u5982\u4e0b\uff1a<\/p>\n

\n
\n
\n
<\/div><\/section>\n
RT2<\/strong><\/span><\/section>\n<\/section>\n<\/section>\n<\/section>\n
\n
#sysname RT2#interface GigabitEthernet0\/0ip address 192.168.1.2 255.255.255.0#interface GigabitEthernet0\/1ip address 23.1.1.2 255.255.255.0#interface Tunnel0 mode greip address 1.1.1.2 255.255.255.0source 23.1.1.2destination 34.1.1.4#ip route-static 34.1.1.0 24 23.1.1.3ip route-static 192.168.5.0 24 Tunnel0<\/pre>\n<\/section>\n
\n
\n
\n
<\/div><\/section>\n
RT-ISP<\/strong><\/span><\/section>\n<\/section>\n<\/section>\n<\/section>\n
\n
#interface GigabitEthernet0\/0ip address 34.1.1.3 255.255.255.0#interface GigabitEthernet0\/1ip address 23.1.1.3 255.255.255.0<\/pre>\n<\/section>\n
\n
\n
\n
<\/div><\/section>\n
RT4<\/strong><\/span><\/section>\n<\/section>\n<\/section>\n<\/section>\n
\n
#<\/span><\/span><\/code>sysname RT4#interface GigabitEthernet0\/0ip address 192.168.5.4 255.255.255.0#interface GigabitEthernet0\/1ip address 34.1.1.4 255.255.255.0#interface Tunnel0 mode greip address 1.1.1.4 255.255.255.0source 34.1.1.4destination 23.1.1.2#ip route-static 23.1.1.0 24 34.1.1.3ip route-static 192.168.1.0 24 Tunnel0<\/pre>\n<\/section>\n
\n
\n
\n
<\/div><\/section>\n
\u9a8c\u8bc1\u914d\u7f6e<\/strong><\/section>\n
<\/div><\/section>\n<\/section>\n<\/section>\n<\/section>\n
\u67e5\u770bRT2\u8bbe\u5907Tunnel\u53e3\u72b6\u6001\u3002<\/p>\n
<\/div><\/p>\n
\u53ef\u4ee5\u770b\u5230\u6709\u51e0\u4e2a\u76f8\u5bf9\u5173\u952e\u7684\u6307\u6807\u9879\uff1a<\/p>\n
1\u3001MTU\u4e3a1476\u5b57\u8282\uff1b<\/p>\n
2\u3001\u96a7\u9053keepalive\u529f\u80fd\u672a\u5f00\u542f\uff0c\u5f00\u542f\u547d\u4ee4\u5982\u4e0b\uff1a<\/p>\n
<\/div><\/p>\n
3\u3001\u96a7\u9053TTL\u503c\u4e3a255\uff1b<\/p>\n
4\u3001GRE over IPv4\u96a7\u9053\u4e2d\u5b89\u5168\u529f\u80fdkey\u672a\u8bbe\u7f6e\uff0c\u5f00\u542f\u547d\u4ee4\u5982\u4e0b\u3002\u5982\u679c\u5f00\u542f\uff0c\u9700\u8981\u4fdd\u8bc1\u4e24\u7aef\u914d\u7f6e\u76f8\u540c\uff1b<\/p>\n
<\/div><\/p>\n
5\u3001GRE over IPv4\u96a7\u9053\u4e2d\u5b89\u5168\u529f\u80fdchecksum\u672a\u8bbe\u7f6e\uff0c\u5f00\u542f\u547d\u4ee4\u5982\u4e0b\uff1b<\/p>\n
<\/div><\/p>\n
6\u3001\u9664\u4e0a\u8ff0\u673a\u7bb1\u4e4b\u5916\uff0c\u8fd8\u53ef\u4ee5\u8bbe\u7f6e\u5c01\u88c5\u540e\u96a7\u9053\u62a5\u6587\u7684DF\uff08Don\u2019t Fragment\uff0c\u4e0d\u5206\u7247\uff09\u6807\u5fd7\u3002\u547d\u4ee4\u4e3a\uff1a<\/p>\n
\n
tunnel dfbit enable<\/pre>\n<\/section>\n
\n
\n
\n
<\/div><\/section>\n
\u9a8c\u8bc1\u96a7\u9053MTU<\/strong><\/section>\n
<\/div><\/section>\n<\/section>\n<\/section>\n<\/section>\n
<\/div><\/p>\n
\u53ef\u4ee5\u53d1\u73b0\uff0c\u5b9e\u9645\u80fd\u901a\u8fc7\u7684\u6700\u5927\u62a5\u6587\u5927\u5c0f\u4e3a1444\u5b57\u8282\u3002\u6293\u4e2a\u5305\u5206\u6790\u4e00\u4e0b\u3002<\/p>\n
<\/div><\/p>\n
\u53ef\u4ee5\u770b\u5230\u62a5\u6587\u7684\u5c01\u88c5\u7ed3\u6784\u4e3a[\u4ee5\u592a\u7f51\u5305\u5934][\u5916\u5c42IPv4\u5305\u5934][GRE\u5c01\u88c5][\u5185\u5c42IPv4\u5305\u5934][ICMP\u62a5\u6587]<\/strong><\/span>\uff0c\u5176\u4e2d[\u5916\u5c42IPv4\u5305\u5934]<\/strong>\u957f\u5ea6\u4e3a20\u5b57\u8282\uff0c[GRE\u5c01\u88c5]<\/strong>\u957f\u5ea6\u4e3a8\u5b57\u8282\uff0c[\u5185\u5c42IPv4\u5305\u5934]<\/strong>\u957f\u5ea6\u4e3a20\u5b57\u8282\u3002\u5f97\u76ca\u4e8e\u6ca1\u6709\u52a0\u5bc6\uff0c\u6211\u4eec\u53ef\u4ee5\u6e05\u695a\u770b\u5230\u6bcf\u5c42\u62a5\u6587\u7684\u6570\u636e\u7ed3\u6784\uff0c[\u5185\u5c42IPv4\u5305\u5934]<\/strong>\u548c[\u5916\u5c42IPv4\u5305\u5934]<\/strong>\u5c01\u88c5\u7ed3\u6784\u5b8c\u5168\u4e00\u81f4\u3002ICMP\u6570\u636e\u6bb5\u957f\u5ea6\u4e3a1444\u5b57\u8282\uff0c\u5c01\u88c58\u5b57\u8282ICMP\u62a5\u6587\u5934\uff0c\u518d\u5c01\u88c520\u5b57\u8282[\u5185\u5c42IPv4\u5305\u5934]<\/strong>\uff0c\u603b\u957f\u5ea6\u6b63\u597d1472\u5b57\u8282\u3002<\/p>\n
\u8fd9\u91cc\u6211\u989d\u5916\u589e\u52a0\u4e86\u6821\u9a8c\u548c\u7684\u914d\u7f6e\uff0c\u53ef\u4ee5\u770b\u5230[GRE\u5c01\u88c5]<\/strong>\u4e2d\u6821\u9a8c\u548c\u76f8\u5173\u5b57\u6bb5\u7684\u5dee\u5f02\u3002<\/p>\n
\n
\n
\n
<\/div><\/section>\n
\u9a8c\u8bc1KEY\u52a0\u5bc6<\/strong><\/section>\n
<\/div><\/section>\n<\/section>\n<\/section>\n<\/section>\n
\u56e0\u4e3a\u6ca1\u6709\u52a0\u5bc6\uff0c\u6240\u4ee5\u80fd\u770b\u5230\u5b8c\u6574\u7684\u6570\u636e\u62a5\u6587\uff0c\u90a3\u8bbe\u7f6eGRE KEY\u80fd\u4e0d\u80fd\u5bf9\u6570\u636e\u8fdb\u884c\u52a0\u5bc6\u5462\uff1f<\/p>\n
\u914d\u7f6e\u4e00\u4e0b\uff0c\u53d1\u73b0\u8fd9\u4e2aKEY\u53ea\u80fd\u662f\u6570\u5b57\u3002<\/p>\n
<\/div><\/p>\n
\u67e5\u770b\u63a5\u53e3\u72b6\u6001\uff0c\u80fd\u76f4\u63a5\u770b\u5230key\u7684\u503c\uff0c\u4e0d\u77e5\u9053\u8fd9\u7b97\u4e0d\u7b97\u4e0d\u5b89\u5168\u3002<\/p>\n
<\/div><\/p>\n
\u5982\u679c\u4e24\u7aef\u8bbe\u7f6e\u7684key\u4e0d\u4e00\u81f4\uff0c\u4e0d\u4f1a\u6709\u9519\u8bef\u63d0\u793a\uff0c\u63a5\u53e3\u72b6\u6001\u4e5f\u4e0d\u4f1a\u534f\u8baeDOWN\uff0c\u4f46\u662f\u4e1a\u52a1\u786e\u5b9e\u4e2d\u65ad\u4e86\u3002<\/p>\n
<\/div><\/p>\n
\u597d\uff0c\u63a5\u4e0b\u6765\u6211\u4eec\u628a\u4e24\u8fb9\u8bbe\u7f6e\u6210\u76f8\u540c\u7684key\uff0c\u9a8c\u8bc1\u4e00\u4e0b\u3002<\/p>\n
<\/div><\/p>\n
\u8fde\u901a\u6027\u6b63\u5e38\u3002\u6293\u4e2a\u5305\u770b\u4e00\u4e0b\u6570\u636e\u662f\u5426\u52a0\u5bc6\u3002<\/p>\n
<\/div><\/p>\n
\u554a\uff0c\u4eae\u778e\u4e86\u6211\u7684\u72d7\u773c\u3002\u5bc6\u7801\u662f\u660e\u6587\u663e\u793a\u7684\uff0c\u6570\u636e\u4f9d\u65e7\u662f\u660e\u6587\u663e\u793a\u7684\u3002\u8fd9\u4e2aGRE\u786e\u5b9e\u65b9\u4fbf\uff0c\u4f46\u662f\u5b89\u5168\u6027\u6709\u5f85\u63d0\u9ad8\u554a\u3002<\/p>\n
\n
\n
\n
<\/div><\/section>\n
\u9a8c\u8bc1\u4e24\u7aef\u540c\u5b50\u7f51<\/strong><\/section>\n
<\/div><\/section>\n<\/section>\n<\/section>\n<\/section>\n
\u8ddf\u6d4b\u8bd5IPsec\u4e00\u6837\uff08\u4e3a\u4ec0\u4e48IPsec\u4e24\u7aef\u5185\u7f51\u7684\u7f51\u6bb5\u80fd\u4e0d\u80fd\u91cd\u590d\uff1f\u5206\u660e\u53ef\u4ee5\u5b9e\u73b0\uff01\uff09\uff0c\u6211\u4eec\u8bd5\u4e00\u4e0b\u4e24\u7aef\u76f8\u540c\u5b50\u7f51\u80fd\u4e0d\u80fd\u4e92\u901a\u3002<\/p>\n
<\/div><\/p>\n
\u5f88\u68d2\uff0c\u8ddf\u4e0a\u6b21\u914d\u7f6e\u76f8\u540c\uff0c\u80fd\u5b9e\u73b0\u4e24\u7aef\u914d\u7f6e\u76f8\u540c\u5b50\u7f51\u7684\u4e92\u901a\uff0c\u800c\u4e14\u53ef\u4ee5\u770b\u5230traceroute\u8def\u5f84\u3002<\/p>\n
\n
\n
\n
<\/div><\/section>\n
\u9a8c\u8bc1\u96a7\u9053DF<\/strong><\/section>\n
<\/div><\/section>\n<\/section>\n<\/section>\n<\/section>\n
\u5728RT2\u8bbe\u5907\u4e0a\u5f00\u542fDF\u4f4d\u6807\u5fd7\uff0c\u9a8c\u8bc1\u53d1\u73b0\u80fd\u901a\u8fc7\u7684\u6570\u636e\u5305\u957f\u5ea6\u5c11\u4e864\u4e2a\u3002<\/p>\n
<\/div><\/p>\n
\u8fd9\u662f\u4ec0\u4e48\u539f\u56e0\uff1f\u6293\u4e2a\u5305\u770b\u4e00\u773c\u3002<\/p>\n
<\/div><\/p>\n
\u597d\u50cf\u4e5f\u6ca1\u4ec0\u4e48\uff0c\u53ea\u662f\u5f00\u4e86DF\u4e4b\u540e\uff0cMTU\u5c31\u5c0f\u4e864\u5b57\u8282\u3002<\/p>\n
<\/div><\/p>\n
\n
\n
\n
<\/div><\/section>\n
\u603b\u7ed3<\/strong><\/section>\n
<\/div><\/section>\n<\/section>\n<\/section>\n<\/section>\n
1\u3001GRE\u7684\u914d\u7f6e\u786e\u5b9e\u5f88\u7b80\u5355\uff0c\u7b80\u5355\u5230\u51e0\u6761\u547d\u4ee4\u5c31\u80fd\u5b9e\u73b0\uff1b<\/p>\n
2\u3001GRE\u7684\u5b89\u5168\u6027\u786e\u5b9e\u6bd4\u8f83\u5dee\uff0c\u5dee\u5230\u9a8c\u8bc1\u96a7\u9053\u7684\u5bc6\u94a5\u90fd\u662f\u660e\u6587\u4f20\u8f93\u7684\uff0c\u800c\u4e14\u5bf9\u5c01\u88c5\u7684\u6570\u636e\u62a5\u6587\u6ca1\u6709\u4efb\u4f55\u52a0\u5bc6\u63aa\u65bd\uff1b<\/p>\n
3\u3001GRE\u96a7\u9053\u4e2d\u5982\u679c\u5f00\u542f\u4e0d\u5141\u8bb8\u5206\u7247\uff0c\u4f1a\u5bfc\u81f4MTU\u53d8\u4e3a1468\u5b57\u8282\uff1b<\/p>\n
4\u3001GRE\u5c01\u88c5\u548cVXLAN\u5c01\u88c5\u7684MTU\u90fd\u662f1472\u5b57\u8282\uff0c\u8981\u662f\u4f60\uff0c\u4f60\u600e\u4e48\u9009\u62e9\uff1f<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"
\u524d\u9762\u7528\u4e24\u7bc7\u6587\u7ae0\u4ecb\u7ecd\u4e86GRE\uff08Generic Routing Encapsulation\uff0c\u901a\u7528\u8def\u7531\u5c01\u88c5\uff09\u534f\u8bae\uff0c\u5206 […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[8,2],"tags":[],"class_list":["post-6601","post","type-post","status-publish","format-standard","hentry","category-cisco","category-network"],"_links":{"self":[{"href":"https:\/\/www.xh86.me\/index.php?rest_route=\/wp\/v2\/posts\/6601","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.xh86.me\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.xh86.me\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.xh86.me\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.xh86.me\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=6601"}],"version-history":[{"count":1,"href":"https:\/\/www.xh86.me\/index.php?rest_route=\/wp\/v2\/posts\/6601\/revisions"}],"predecessor-version":[{"id":6801,"href":"https:\/\/www.xh86.me\/index.php?rest_route=\/wp\/v2\/posts\/6601\/revisions\/6801"}],"wp:attachment":[{"href":"https:\/\/www.xh86.me\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=6601"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.xh86.me\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=6601"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.xh86.me\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=6601"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}