Terminate and Scope-Shift Matrix

The following table summarizes the behavior of scope-shift and terminate in the following stages of packet processing:

Note

Note

  • Scope-shift is not supported simultaneously in two stages.
  • If scope-shift comes before a terminate, the terminate action terminates two layers of the tunnel.

Packet Capture

Ethernet II, Src: 00:00:00_00:00:02 (00:00:00:00:00:02), Dst: 00:00:00_00:00:01 (00:00:00:00:00:01)
802.1Q Virtual LAN, PRI: 0, DEI: 0, ID: 100
Internet Protocol Version 4, Src: 1.1.1.1, DST: 7.7.7.7		1st GRE Layer
Generic Routing Encapsulation (IP)
Internet Protocol Version 4, Src: 2.2.2.2, DST: 8.8.8.8		2nd GRE Layer
Generic Routing Encapsulation (IP)
Internet Protocol Version 4, Src: 3.3.3.3, DST: 9.9.9.9		3rd GRE Layer
Generic Routing Encapsulation (IP)
Internet Protocol Version 4, Src: 4.4.4.4, DST: 10.10.10.10
Data (886 bytes)
# Ingress Group Route Map Listener Policy Expected Behavior
1 Terminate Scope-shift Terminate
  • Ingress Group terminates 1st GRE layer.
  • Route Map lookup happens with 2nd IP layer.
  • Route map shifts scope to 3rd IP layer.
  • Listener policy lookup happens with 3rd IP Layer.
  • 2nd and 3rd GRE layer is terminated by listener policy.
2 Terminate Scope-shift
  • Ingress Group terminates 1st GRE layer.
  • Route Map lookup happens with 2nd IP layer.
  • Route map shifts scope to 3rd IP layer.
  • Listener policy lookup happens with 3rd IP Layer.
3 Terminate Terminate Terminate
  • Ingress Group terminates 1st GRE layer.
  • Route Map lookup happens with 2nd IP layer.
  • Route map terminates 2nd GRE layer.
  • Listener policy lookup happens with 3rd IP Layer.
  • Listener policy terminates 3rd GRE Layer.
4 Terminate Terminate
  • Ingress Group terminates 1st GRE layer.
  • Route Map lookup happens with 2nd IP layer.
  • Route map terminates 2nd IP layer.
  • Listener policy lookup happens with 3rd IP Layer.
5 Terminate Terminate
  • Ingress Group terminates 1st GRE layer.
  • Route Map lookup happens with 2nd IP layer.
  • Listener policy lookup happens with 2nd IP Layer.
  • Listener policy terminates 2nd GRE Layer.
6 Scope-shift Scope-shift Terminate Scope-shift is not supported simultaneously in two stages.
7 Scope-shift Scope-shift Scope-shift is not supported simultaneously in two stages.
8 Scope-shift Terminate Terminate
  • Ingress Group shifts scope to 2nd IP layer.
  • Route Map lookup happens with 2nd IP layer.
  • 1st and 2nd GRE layer is terminated by route map.
  • Listener policy lookup happens with 3rd IP Layer.
  • 3rd GRE layer is terminated by listener policy.
9 Scope-shift Terminate
  • Ingress Group shifts scope to 2nd IP layer.
  • Route Map lookup happens with 2nd IP layer.
  • 1st and 2nd GRE layer is terminated by route map.
  • Listener policy lookup happens with 3rd IP Layer.
10 Scope-shift Terminate
  • Ingress Group shifts scope to 2nd IP layer.
  • Route Map lookup happens with 2nd IP layer
  • Listener policy lookup happens with 2nd IP Layer.
  • 1st and 2nd GRE layer is terminated by listener policy.
11 Scope-shift Terminate
  • Route Map lookup happens with 1st IP layer.
  • Route map shifts scope to 2nd IP layer.
  • Listener policy lookup happens with 2nd IP Layer.
  • 1st and 2nd GRE layer is terminated by listener policy.
12 Scope-shift
  • Route Map lookup happens with 1st IP layer.
  • Route map shifts scope to 2nd IP layer.
  • Listener policy lookup happens with 2nd IP Layer.
  • No change in Packet.
13 Terminate Terminate
  • Route Map lookup happens with 1st IP layer.
  • 1st GRE layer is terminated by route map.
  • Listener policy lookup happens with 2nd IP Layer.
  • 2nd GRE layer is terminated by listener policy.
14 Terminate
  • Route Map lookup happens with 1st IP layer.
  • 1st GRE layer is terminated by route map.
  • Listener policy lookup happens with 2nd IP Layer.
15 Terminate
  • All Lookup happens with 1st IP layer.
  • 1st GRE layer is terminated by listener policy.
16
  • All Lookup happens with 1st IP layer.
  • No change in egress packet.
9037169-00 Rev AA