Service Manual

Syntax tunnel allow-remote {ip-address | ipv6-address} [mask]
To delete a configured allow-remote entry use the no tunnel allow-remote
command. Any specified address/mask values must match an existing entry for the
delete to succeed. If the address and mask are not specified, this command deletes
all allow-remote entries.
Parameters
ip-address Enter the source IPv4 address in A.B.C.D format.
ipv6–address Enter the source IPv6 address in X:X:X:X::X format.
mask (OPTIONAL) Enter a network mask in /prefix format (/x) or
A.B.C.D to match a range of remote addresses. The default
mask is /32 for IPv4 addresses and /128 for IPv6 addresses,
which match only the specified address.
Defaults If you do not configure tunnel allow remote , all traffic which is destined to tunnel
source address is decapsulated.
Command Modes INTERFACE TUNNEL
Command History
Version Description
9.8(0.0) Introduced on the S3048-ON and S4048-ON.
9.7(0.0) Introduced on the S6000-ON.
9.4(0.0) Introduced on the S4810, S4820T, S6000 and Z9000.
9.3(0.1) Introduced on the S6000 and Z9000.
Usage Information
You can configure up to eight allow-remote entries on any multipoint receive-only
tunnel.
This command fails if the address family entered does not match the outer header
address family of the tunnel mode, tunnel source, or any other tunnel allow-
remote.
If you configure any allow-remote , the tunnel source or tunnel mode commands
fail if the outer header address family does not match that of the configured allow-
remote.
tunnel destination
Set a destination endpoint for the tunnel.
Syntax
tunnel destination {ip-address | ipv6–address}
1778
Tunneling