tunnel allow-remote
Configure the remote IPv4 or IPv6 addresses whose tunneled packets are accepted for decapsulation. If
you do not configure an allow-remote address, tunneled packets from all remote peer addresses are
accepted.
Z9500
Syntax tunnel allow-remote {ip-address | ipv6-address} [mask]
To delete a configured allow-remote entry, enter the no tunnel allow-remote
command and specify a configured IPv4/IPv6 address and mask value. If you enter
the no form of the command without an address and mask value, all configured
allow-remote entries are deleted.
Parameters ip-address Enter the source IPv4 address in A.B.C.D format.
ipv6–address Enter the source IPv6 address in X:X:X:X::X format.
mask (OPTIONAL) Enter a network mask in /prefix format (/x) or
A.B.C.D to match a range of remote addresses. The default
mask is /32 for IPv4 addresses and /128 for IPv6 addresses,
which match only the specified address.
Defaults If you do not configure a tunnel allow-remote address, all traffic destined to
tunnel’s source address is decapsulated.
Command
Modes
INTERFACE TUNNEL
Command
History Version Description
9.5(0.1) Introduced on the Z9500.
9.4(0.0) Introduced on the S4810, S4820T, S6000 and Z9000.
9.3(0.1) Introduced on the S6000 and Z9000.
Usage
Information You can configure up to eight allow-remote entries on a multipoint receive-only
tunnel.
This command fails if the address family entered does not match the outer header
address family of the tunnel mode, tunnel source, or any other tunnel allow-
remote address.
If you configure an allow-remote address, the tunnel source or tunnel mode
commands fail if the outer header address family does not match that of the
configured allow-remote address.
Tunneling 1805