Citrix SD-WAN

Configure GRE Tunnels for the MCN Site (Optional)

May 28, 2021

Contributed by:

C S

The GRE Tunnel feature allows you to configure Citrix SD-WAN appliances to terminate GRE tunnels on the LAN or Intranet. If you do not want to configure this site as a GRE Tunnel termination node, you can skip this step, and proceed to the section, Configuring the WAN Links for the MCN Site.

To configure a GRE Tunnel, do the following:

Continuing in the connections tab for the new MCN site, click GRE Tunnels. This opens the GRE Tunnels table for the new site.
Click + to the right of the GRE Tunnels. This adds a new blank GRE Tunnel entry to the table and opens it for editing.
Configure the GRE Tunnel settings.

Enter the following:
- Service Type - Choose the service type either Intranet or LAN from the drop-down list.
- Name:
  - If the service type is Intranet, choose from the list of configured intranet services in the drop-down menu.
  - If the service type is LAN, enter a name for the new GRE tunnel or accept the default.
  - Default uses a naming format Appliance-Tunnel-<number> - Where <number> is the number of GRE Tunnels configured for this site, incremented by one.
- Intranet Service Type - For an Intranet service type, choose Default or ZScaler from the drop-down list.
- Firewall Zone - Select the file zone for the GRE tunnel to you.
- Source IP – Select a source IP Address for the tunnel from the drop-down menu for this field. The menu options are the list of Virtual Interfaces configured for this site. Configure at least one Virtual Interface before you can configure a GRE Tunnel. For instructions, see Configuring the Virtual Interface Groups for the MCN Site and Configuring the Virtual IP Addresses for the MCN Site.
  - Public Source IP: Enter the IP address to be used as the source address for packets in the GRE tunnel. The source IP address is the starting point of the GRE tunnel.
  - Destination IP – Enter the IP address to be used as the host destination. The destination IP address is the ending point of the GRE tunnel.
  - Tunnel IP / Prefix – Enter the IP Address and prefix used for the GRE tunnel interface.
  - Checksum – Select the Checksum box to enable Checksum for the tunnel GRE header.
  - Keepalive Period – Enter the wait time interval (in seconds) between keepalive messages. If configured to 0, no keepalive packets are sent, but the tunnel remains up. The default is 10.
  - Keepalive Retries – Enter the number of keepalive retries the Virtual WAN Appliance must attempt before it brings down the tunnel. The default is 3.
Click Apply. This submits your settings and adds the new GRE Tunnel to the table.
To configure more GRE Tunnels, click + to the right of the GRE Tunnels, and proceed as per the preceding steps.

The next step is to configure the WAN links for the MCN site.

The official version of this content is in English. Some of the Cloud Software Group documentation content is machine translated for your convenience only. Cloud Software Group has no control over machine-translated content, which may contain errors, inaccuracies or unsuitable language. No warranty of any kind, either expressed or implied, is made as to the accuracy, reliability, suitability, or correctness of any translations made from the English original into any other language, or that your Cloud Software Group product or service conforms to any machine translated content, and any warranty provided under the applicable end user license agreement or terms of service, or any other agreement with Cloud Software Group, that the product or service conforms with any documentation shall not apply to the extent that such documentation has been machine translated. Cloud Software Group will not be held responsible for any damage or issues that may arise from using machine-translated content.

Configure GRE Tunnels for the MCN Site (Optional)

May 28, 2021

Contributed by:

C S

May 28, 2021

Contributed by:

C S

Configure GRE Tunnels for the MCN Site (Optional)

In this article