Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.


GRE (IPSec encrypted) tunnel interface over DSL


I have a question regarding GRE tunnel interface over Internet DSLs, encrypted using IPSec. We use below config:

interface Tunnel1

bandwidth 1000

ip address <ip> <mask>

no ip redirects

ip mtu 1272

ip nhrp authentication <auth_profile>

ip nhrp map <ip> <mask>

ip nhrp map multicast <ip>

ip nhrp network-id <id>

ip nhrp holdtime 300

ip nhrp nhs <ip>

ip tcp adjust-mss 1232

no ip mroute-cache

delay 1000

tunnel source <interface>

tunnel mode gre multipoint

tunnel key <key>

tunnel protection ipsec profile <profile>

All works fine, but if I perform a show int tunnel 1, the following is showed.

Tunnel1 is up, line protocol is up

Hardware is Tunnel

Internet address is <snipped ip info>

MTU 1514 bytes, BW 1000 Kbit, DLY 10000 usec,

reliability 255/255, txload 1/255, rxload 1/255

Encapsulation TUNNEL, loopback not set

Keepalive not set

Tunnel source <snipped ip info> (<snipped interface info>), destination UNKNOWN

Tunnel protocol/transport multi-GRE/IP

Key 0x418937, sequencing disabled

Checksumming of packets disabled

Fast tunneling enabled

Tunnel transmit bandwidth 8000 (kbps)

Tunnel receive bandwidth 8000 (kbps)

Tunnel protection via IPSec (profile <snipped>)

Last input 00:00:00, output 00:00:00, output hang never

Last clearing of "show interface" counters never

Input queue: 0/75/0/0 (size/max/drops/flushes); Total output drops: 0

Queueing strategy: fifo

Output queue: 0/0 (size/max)

5 minute input rate 4000 bits/sec, 4 packets/sec

5 minute output rate 6000 bits/sec, 5 packets/sec

6637429 packets input, 3015447970 bytes, 0 no buffer

Received 0 broadcasts, 0 runts, 0 giants, 0 throttles

0 input errors, 0 CRC, 0 frame, 0 overrun, 0 ignored, 0 abort

8549949 packets output, 3620144450 bytes, 0 underruns

0 output errors, 0 collisions, 0 interface resets

0 output buffer failures, 0 output buffers swapped out

Now to my question, the displayed values:

Tunnel transmit bandwidth 8000 (kbps)

Tunnel receive bandwidth 8000 (kbps)

How exactly are these determined, as they seem to be the same for every tunnel and not depending on the bandwidth command?

How can one influence these?

What is the purpose of these values?

Does it affect traffic?

Thanks in advance for your answer(s) :-))



Re: GRE (IPSec encrypted) tunnel interface over DSL

Is there really nobody who can tell?

CreatePlease to create content