Terminate Non-Transport Tunnels

About this task

Perform this procedure to terminate non-transport tunnels.

Procedure

Create an ingress-group with the required parameters.

device(config)# ingress-group name
device (config-ingress-group)#

Attach the ingress group to the required ingress port/interface.

device(config)# interface ethernet 1/12
device(config-if-eth-0/12)# set ingress-group name

Configure the required ingress-group traffic-type parameters for traffic classification:
- To configure the traffic-type and mode, go to step 4.
- To configure the traffic-type with the IP address to be matched, go to step 5.
Configure the required traffic-type parameter and mode for the ingress-group.
- Terminate mode: Decapsulates the configured packet headers.
- Scope-shift mode: Shifts scope of the configured packets to inner headers.
```
device(config-ingress-group)# traffic-type {gre | gtpu | ipip | nvgre | vxlan} mode [decap | new-scope]
```
- The outer (sap-id) and inner (inner-sap-id) tunnel SAP IDs are generated for tunnel levels one and two.
- If the mode to decapsulate or terminate packet headers is not specified, packets are classified based on configured traffic type and tunnel ID parameters.

Configure the traffic-type with the IP address to be matched for traffic classification.

device(config-ingress-group)# traffic-type { gre | ipip | gtpu | vxlan | nvgre } ip [ src-ip src-mask dst-ip dst-mask ]

Configure the L3-ACL to forward the traffic.

Set the ACL in the route-map.

Bind the route-map to the ingress-group.

device(config)# ip access-list name
device(config)# route-map name sequence_number
device(config-route-map)# match {mac | ip | ipv6} name
device(config-route-map-name)# forward-action permit

Configure the required ports, interfaces, or port-channel:
- List of egress ports and interfaces in the egress-group and the associated group in route-map.
- Egress interface in the route-map.
- Port-channel in the egress-group and the associated group in route-map.
```
device(config)# interface ethernet slot/port 
device(config-if)# set ingress-group name
```