How GRE Tunnels Work | VPN Tunnels Part 1

[@namratatiwari1588]

Best video on GRE ! Surfed over 5-6 videos before landing to this.

[@oliver1121]

It is so weird how perfectly timed these videos are coming out to my studying. When I was looking into learning VRF's you released an excellent video series on VRF's. Now when I want to brush up on VPN's you release this video at the perfect time. Keep up the awesome work! Hopefully the next series will be MPLS.

[@NetworkDirection]

That is uncanny! I have been thinking about basic MPLS as a series. Won’t be next, but hopefully soon

[@GamjaField]

LOL same 😂

[@NetworkDirection]

Nice!

[@varunkashyap5644]

thanks buddy for creating this series. i read a lot but could not get through before , but today atlast i got. keep making such videos

[@NetworkDirection]

It's so good to hear that these videos are helping you

[@DileepKumarMB]

Overlay network using GRE Tunnel- nicely explained, Thanks

[@teamstandyteamstandy9830]

Very simple, high level overview of what a GRE tunnel is/does. Well done. Thank you!

[@NetworkDirection]

You're welcome!

[@TheLithGH]

Thanks for creating and sharing with us!! Perfect explanation for us that are new to GRE!!! Cheers!

[@Alex-gf4iu]

What a great video. Really useful the commands were at the bottom and you explained the difference between source and destination

[@PR-cn5bb]

Finally some quality tutorials, great work!

[@NetworkDirection]

I appreciate the feedback Pawel, thanks!

[@Jderama100]

Thank you, very clear and easy to understand. Please continue to make videos like this - highly appreciate it.

[@NetworkDirection]

You're welcome! I'm currently working on extending this with DMVPN

[@amitkala6382]

The way you demonstrated is simply amazing.... Would you mind to share low level stuff on ikev1 &2..... Thanks again.

[@NetworkDirection]

Thank you! I might revisit IKE. I'll add it to my list, thanks again

[@slamtoo11]

Just saw this video after I had a question in CCNA about GRE. This is amazing. Thank you for putting this together.

[@Neon-nv4oy]

May I ask what you're doing in life now with a bit over 4 years in the field ? (if you stuck to the field ofc) I just wanna get an idea

[@markusscott6696]

It is a nice explanation of packet encapsulation (starts from 6 min), but i dont understand where is the role of a tunnel - 192.168.1.0 network???

[@NetworkDirection]

Read more here: networkdirection.net/GRE+Tunnels Try the lab here: networkdirection.net/labsandquizzes/labs/lab-gre-tunnels/

[@samsonv9332]

Awesome explanation, thanks!

[@NetworkDirection]

Glad you enjoyed it!

[@p4pryk]

There is a mistake with address on topology and set for tunnel src/dst addr. 20.20.20.20 and 10.20.20.20. Anyway, great series :) thx for that.

[@NetworkDirection]

You're absolutely right! Sorry everyone, the topology says 20.20.20.20 when it should say 10.20.20.20 Thanks for noticing this

[@jnev9046]

@@NetworkDirection would this type of mis-configuration show a tunnel up/down or a reset/up? BTW, Great Explanation!

[@NetworkDirection]

@@jnev9046 Do you mean if we put in the wrong destination IP? I think this would mark the tunnel as up, but it wouldn't work

[@ithereos9554]

@@NetworkDirection But, if the router did have reachability to 20.20.20.20 (and 20.20.20.20 was the correct destination IP), the GRE tunnel will go up without issues no?

[@ivanarteaga3282]

pin this comment! :P

[@peterruppert7856]

Thank you so much!!! Great video!!

[@NetworkDirection]

You're welcome!

[@TheMaro57]

I have no idea what you're talking about but you're better than a college professor definitely...

[@alexandercullum6632]

super helpful video, thank you!

[@NetworkDirection]

Good to hear, thanks!

[@steveshawcross]

Good and simple explanation !!

[@noelgriffiths7561]

I am currently learning CCNP Enterprise Encor and found this video series on 'GRE' along with the 'VXLan' and 'VRF' videos very informative with clear explanations. Thank you for posting these videos, will you be posting any others that will be helpful with the CCNP Enterprise course?

[@EpisonicProject]

Amazing video I understand gre now

[@Null-Null1]

Another great explaination!

[@NetworkDirection]

Thanks Daniel! So happy that it makes sense. Looking forward to seeing GRE tunnels with IPSec?

[@Null-Null1]

@@NetworkDirection Definitely! Always enjoy your well presented and explained videos

[@Amsj1166]

Wow very nicely explained

[@YeshwanthSimhadri]

very nice explanation - may be a LAB would have been an icing on the cake

[@NetworkDirection]

Thanks, that's a good suggestion. I'm working on a couple of GRE labs now

[@NetworkDirection]

Here's the lab: networkdirection.net/labsandquizzes/labs/lab-gre-tunnels/

[@weaselfeet]

This was fantastic, looking forward the the encryption component,

[@NetworkDirection]

I aim to please 😁

[@mdsameer2774]

very good. Keep going,

[@ahmedareem9599]

man, that's a fantastic video!

[@NetworkDirection]

Thanks!

[@TheVillageShow]

Very beautiful. Thankyou so much 🎉🎉

[@jaronprovidence9484]

Awesome video, thanks!

[@user-qo8js3qk5z]

Excellent video thank you so much for the breakdown.

[@NetworkDirection]

Glad to help!

[@mahendrakumarsahu4395]

Awesome !!! I like very much the animated explanation ♥️ Thank you Sir

[@MohanKumar-wp8kc]

good series

[@NetworkDirection]

Thank you!

[@tommclaughlin7179]

Thank you for simplifying gre!

[@NetworkDirection]

My pleasure!

[@yusefskaff47]

Excellent explanation!! I appreciate that 👍🏼

[@NetworkDirection]

Glad it was helpful!

[@DillyDogSays]

Does GRE tunnels work with Virtual Networks also? So two virtual networks could communicate on a SD-WAN via GRE Tunneling?

[@NetworkDirection]

SD-WAN uses a lot of technologies 'under the hood', including tunnels (possibly GRE), MPLS, VXLAN, and thinkg like these. Each provider implements it differently though

[@pin-fatsh9553]

Thanks for this well-explained nuggets :)

[@NetworkDirection]

You're very welcome!

[@AeroAngle]

enabling jumbo frames help with GRE and why or why not?

[@allien5329]

best explained !!!

[@NetworkDirection]

Thank you!

[@Mike-ci5io]

How does lowering mtu avoid fragmentation infact it will increase it so you want highest mtu interface can support

[@narendrajayram1317]

great explanation!

[@NetworkDirection]

Thanks!

[@raadhoque]

very good😇

[@babakvelamkon]

Thanks. Plz emphasis more on vpn vs gre application, similarity and differences

[@NetworkDirection]

I'm not sure I understand correct... GRE is a type of VPN. It's different to the app that you install on your computer to connect into the office from home. GRE is different, as you're not connecting a single device to the network virtually. Instead, you're creating a virtual link between entire networks. Does that help?

[@babakvelamkon]

Network Direction Thanks. The confusion I have is why to go for site-2-site Vpn and not gre/ipsec. Is there any reason that most people deploy the vpn and not secure gre?

[@NetworkDirection]

Ah, I understand now. Not everything supports GRE. GRE is kind of a routing technology. So, you'll commonly find it on routers. An IPSec VPN was developed from the security point of view, so it is mor common on firewalls. ASA's for example, support IPSec VPN's, not GRE + IPSec. As to why vendors decide to support one technology but not another... I'm not sure.

[@babakvelamkon]

Network Direction Thanks alot

[@NetworkDirection]

You’re welcome

[@exmundi]

Those virtual interfaces build an ARP cache? If yes, how do they seem?

[@NetworkDirection]

The ARP cache will build for anything with L2 adjacency

[@muhammadsiddique5892]

Great Explanation.. Thanks.

[@Zbenesch]

Nicely done!

[@Robertorossell]

Thanks great material

[@mmobini1803]

Thank you!

[@GamjaField]

Thank you. Great explanation as always​. Will you cover the IPSec tunnel in this series?

[@NetworkDirection]

Absolutely! Give me two weeks, and you’ll have a video on adding IPSec to the GRE tunnel, including the basics of how IPSec works

[@GamjaField]

Network Direction Awesome! :)

[@sarvesh81s]

Thanks for Very good Explanation , how did you put IP address in tunnel source command ?? it should be interface

[@NetworkDirection]

You can use either, but using the IP allows the router to choose the best interface based on the address. In some cases this will improve stability (covered in the following videos)

[@jordantaylor3788]

Is this still true? I didn't think you could advertise OSPF over GRE as the interfaces would be flapping when trying to send ospf packets to the endpoint?

[@NetworkDirection]

Hi Jordan Thanks for your comment! What you are describing is route recursion. This can happen if you do it wrong, but OSPF over GRE is just fine if you do it right. I believe the next video in this series discusses this further. 😃 Have a great day!

[@daveycrockett9447]

only problem with this description - is you have a RFC 1911 on the left that will NOT route across the Internet. Would have been nice if the example was more realistic in such a way that it would work in a real world scenario.

[@NetworkDirection]

Do you mean RFC1918?

[@jairusan]

I appreciate the effort and time spent to make this video, however, there are just too many mistakes in the content for this specific demonstration, which is dangerous and frustrating for those who really took the time to understand the configuration and even emulate the exercise. I think there are mistakes in the destination IP address: 20.20.20.20/24 > 10.20.20.20/24. In the explanation of how the packets travel through the OVERLAY VTI's or GRE tunnel, NOT UNDERLAY as you mentioned in the video, and also I am not sure if you meant 172.16.1.1 and 172.16.1.2 and forgot to specify the CIDR here...as well. Again, not trying to troll or anything but I think this video should be removed, corrected, and re-posted for the sake of all members subscribed. There are a lot of people commenting on things like, great work, awesome video, great explanation, and we know that they definitely didn't understand what they just watched. Thank you for all you do, as I am subscribed and love some of the other videos you have put together, but, unfortunately, after checking this GRE one very carefully, I will have to be very careful going forward when following the videos you post. Hope this feedback is helpful.

[@jahedbenbarka9008]

Thank u man.....

[@eksadiss]

5:28 you said 1436 when I think you meant to say 1476

[@digiground7613]

nice...

[@NetworkDirection]

Thanks!

[@arunrkrishnan9833]

perfect

[@NetworkDirection]

Thank you!

[@ahmed786tutu]

i think you missed the static route explanation thats needed here

[@NetworkDirection]

Do you mean explaining what static routes are, or how they're used for this application?

[@ahmed786tutu]

@@NetworkDirection yeah i meant for this application, ie how do the two edges know how to get to each other and how do we force traffic over the tunnel. also how not to cause recursive routing issues. but the video was information nonetheless.

[@leonelsimoes2616]

Destination address should be 192.168.2.1 instead of 192.168.1.2

[@NetworkDirection]

Thank you! Unfortunately, I can't go back and change it

[@rohanofelvenpower5566]

aha so very very simple. Basically it adds what is called "Outer IP" header which has the ISPs routers IPs which are PUBLIC IPs so the routers over the Internet (/WAN) KNOW where they are. And there is also the small gre header that says what the original IP version is being used by the private hosts with private, non-routable IP addresses. So you stick public IPs on top of the packet and route it as normal. By the time it arrives at the destination and it is de-encapsulated the private host will see it's private ip (non-routable) that it knows. So easy it's a joke haha