Sim 08: GRE over IPsec (IKEv2) in a VRF¶
Blueprint 2.2 · Difficulty: Hard · Time target: 25 minutes
HQ (R1) and a branch (R2) each have a corporate LAN in VRF CORP. Their internet links are in the global routing table. Build an encrypted GRE tunnel between them that carries only CORP traffic, and run OSPF across it.
Download the lab
CML lab file · EVE-NG lab file
5 nodes. The lab boots in its starting configuration. CML: Import a lab, then start it. EVE-NG: import the .unl from the lab list; if your image folder names differ, edit each node's image.
Topology¶
graph LR
L1["HQ LAN<br/>10.10.10.0/24<br/>VRF CORP"]
R1["R1 HQ<br/>C8000v"]
ISP["ISP<br/>IOSv"]
R2["R2 Branch<br/>C8000v"]
L2["Branch LAN<br/>10.20.20.0/24<br/>VRF CORP"]
L1 -- "Gi2 .1" --- R1
R1 -- "Gi1 .1 - 203.0.113.0/30 - Gi0/0 .2" --- ISP
ISP -- "Gi0/1 .5 - 203.0.113.4/30 - Gi1 .6" --- R2
R2 -- "Gi2 .1" --- L2
R1 -.-|"Tunnel0 172.16.12.1/30 to .2/30<br/>GRE over IPsec, VRF CORP"| R2| Node | CML image |
|---|---|
| R1, R2 | Catalyst 8000v |
| ISP | IOSv |
Free account required for the rest
The rest of this page is for members. You're seeing a free sample. A free account unlocks everything: every question bank, the timed exams, the cram sheets, the simulations and the lab files.
Unlock the full question banks and cram sheets
A free account opens every question bank, the timed practice exams, the printable cram sheets, all the simulations and the lab files. Without one you see a 5-question sample of each.
No card needed. Study tips by email are optional and off unless you tick the box. Your address is never sold or shared. Privacy policy · Terms
Signed in as . Your account
You're on the free account, so lessons after the first module, question banks, exams and cram sheets show a sample. See Track Pass and All-Access
Also from NetManager Systems: NetManager, network monitoring for multi-vendor networks. Try the NetManager, NetDiag, PCAP Analyzer and OpsDash demos: every new account gets a free 7-day read-only login to each.