Fortinet Document Library

Version:


Table of Contents

CLI Reference

6.0.0
Download PDF
Copy Link

system gre-tunnel

Use this command to configure a GRE Tunnel for your FortiGate, to allow remote transmission of data through Cisco devices that also have a GRE Tunnel configured.

History

The following table shows all newly added, changed, or removed entries as of FortiOS 6.0.

Command Description

set ip-version {4 | 6}

set remote-gw6 <addr6>

set local-gw6 <addr6>

Support for GRE tunnel termination using IPv6 addresses on both ends of the tunnel (in addition to the pre-existing IPv4 support).

config system gre-tunnel
    edit {name}
    # Configure GRE tunnel.
        set name {string}   Tunnel name. size[15]
        set interface {string}   Interface name. size[15] - datasource(s): system.interface.name
        set ip-version {4 | 6}   IP version to use for VPN interface.
                4  Use IPv4 addressing for gateways.
                6  Use IPv6 addressing for gateways.
        set remote-gw6 {ipv6 address}   IPv6 address of the remote gateway.
        set local-gw6 {ipv6 address}   IPv6 address of the local gateway.
        set remote-gw {ipv4 address}   IP address of the remote gateway.
        set local-gw {ipv4 address any}   IP address of the local gateway.
        set dscp-copying {disable | enable}   Enable/disable DSCP copying.
        set keepalive-interval {integer}   Keepalive message interval (0 - 32767, 0 = disabled). range[0-32767]
        set keepalive-failtimes {integer}   Number of consecutive unreturned keepalive messages before a GRE connection is considered down (1 - 255). range[1-255]
    next
end

system gre-tunnel

Use this command to configure a GRE Tunnel for your FortiGate, to allow remote transmission of data through Cisco devices that also have a GRE Tunnel configured.

History

The following table shows all newly added, changed, or removed entries as of FortiOS 6.0.

Command Description

set ip-version {4 | 6}

set remote-gw6 <addr6>

set local-gw6 <addr6>

Support for GRE tunnel termination using IPv6 addresses on both ends of the tunnel (in addition to the pre-existing IPv4 support).

config system gre-tunnel
    edit {name}
    # Configure GRE tunnel.
        set name {string}   Tunnel name. size[15]
        set interface {string}   Interface name. size[15] - datasource(s): system.interface.name
        set ip-version {4 | 6}   IP version to use for VPN interface.
                4  Use IPv4 addressing for gateways.
                6  Use IPv6 addressing for gateways.
        set remote-gw6 {ipv6 address}   IPv6 address of the remote gateway.
        set local-gw6 {ipv6 address}   IPv6 address of the local gateway.
        set remote-gw {ipv4 address}   IP address of the remote gateway.
        set local-gw {ipv4 address any}   IP address of the local gateway.
        set dscp-copying {disable | enable}   Enable/disable DSCP copying.
        set keepalive-interval {integer}   Keepalive message interval (0 - 32767, 0 = disabled). range[0-32767]
        set keepalive-failtimes {integer}   Number of consecutive unreturned keepalive messages before a GRE connection is considered down (1 - 255). range[1-255]
    next
end