A VPRN or IES service (the delivery service) must have at least one IP interface associated with a public tunnel SAP to receive and process the following types of packets associated with GRE, IP-IP and IPsec tunnels:
GRE (IP protocol 47)
IP-IP (IP protocol 4)
IPsec ESP (IP protocol 50)
IKE (UDP)
The public tunnel SAP type has the format tunnel-tunnel-group.public:index, as shown in the following CLI example.
*A:Dut-C>config>service# info
----------------------------------------------
customer 1 create
description "Default customer"
exit
ies 1 customer 1 create
interface "public" create
address 192.168.12.1/24
tos-marking-state untrusted
sap tunnel-1.public:200 create
exit
exit
no shutdown
exit
vprn 2 customer 1 create
route-distinguisher 10.1.1.1:65007
interface "greTunnel" tunnel create
address 10.0.0.1/24
dhcp
no shutdown
exit
sap tunnel-1.private:210 create
ip-tunnel "toCel" create
dest-ip 10.0.0.2
gre-header
source 192.168.12.100
remote-ip 10.251.12.2
backup-remote-ip 10.251.12.22
delivery-service 1
no shutdown
exit
exit
exit
no shutdown
exit
----------------------------------------------
*A:Dut-C>config>service#