Users Guide

117| Network Configuration Parameters Dell Networking W-Series ArubaOS 6.5.x| User Guide
About Configuring Static Routes
You can configure a static route that specifies the IP address of a tunnel as the next-hop for traffic for a specific
destination. See Configuring Static Routes on page 108 for detailed information on how to configure a static
route.
While redirecting traffic into a Layer-3 GREtunnel via a static route, be sure to use the controller's tunnel IPaddress
as the next-hop, instead of providing the destination controller's tunnel IP address.
Referring to Figure 18, the following are examples of the required static route configurations to direct traffic
into the IPv4 Layer-3 GRE tunnel. for Controller-1 and Controller-2:
l For the controller named Controller-1:
(Controller-1) (config) # ip route 20.20.202.0 255.255.255.0 1.1.1.1
l For the controller named Controller-2:
(Controller-2) (config) # ip route 10.10.101.0 255.255.255.0 1.1.1.2
Configuring a Firewall Policy Rule
You can configure a firewall policy rule to redirect selected traffic into a GRE tunnel.
Traffic redirected by a firewall policy rule is not forwarded to a tunnel that is “down” (see the next section,
Configuring Tunnel Keepalives, for more information on how GRE tunnel status is determined).
From the WebUI
To direct traffic into a GRE tunnel via a firewall policy via the WebUI:
1. On the controller, navigate to the Configuration > Security > Access Control > Policies page.
Figure 24 Firewall Policies Page
2. To create a new firewall policy, click Add.
To edit an existing policy, click Edit.
The Add New Policy screen appears.