VPN - Vanguard Networks

VPN Applications
Tunnel Support for
Bridge Traffic
Figure 1-6 shows how to connect two half bridges using a tunnel. Bridge packets are
transported from one LAN to the other through tunneling. The type of LANs used at
the remote ends can be the same or different.
The overall configuration guidelines of tunnel support for bridge traffic are:
• Configure each tunnel with a unique Bridge Link Number. The Bridge Link
can be Transparent, Source Routing or Translational Bridge Traffic.
• All bridge packets intended for the remote side bridge, passing through the
tunnel are encapsulated with encrypted GRE and IP headers, and then sent
over the tunnel.
• On the remote side tunnel, the IP and GRE Headers are removed after
decryption and the original bridge packet is forwarded to the appropriate host.
• Source Routing Bridge, Transparent Bridge, and Translational Bridge traffics
can be tunneled.
• For SR Bridge Traffic over a LAN Tunnel, the “Link Mode” must be
configured as RFC1294 in the Bridge Link Configuration, corresponding to
the Tunnel.
Note
For more information on configuring your Vanguard device for tunneling, refer
to the “Tunnel Configuration” section in Chapter 2.
Ethernet LAN
Ethernet LAN
Router acting as a
transparent bridge
Router acting as a
transparent bridge
215.0.1.2
R1
Internet
R2
215.0.1.5
215.0.1.3
215.0.1.6
215.0.1.4
Tunnel
215.0.1.7
Figure 1-6. Bridged Packets Transported Using a Tunnel
For more information on configuring a bridge for your Vanguard device, refer to the
Bridging Manual (Part number T0100-02).
Virtual Private Network 1-7
T0103-10, Revision L Release 7.3