Hello,
Does anyone know if the NSE 3000 can do GRE tunnelling? I can’t seem to see anything in the manual.
Thanks
GRE tunneling is not supported
nothing in the roadmap?
Could you please elaborate on the use case for this? Is it an overlay LAN network for Wi-Fi APs, tunneling over the internet, or something else.
It’s for a Cloudflare Magic WAN deployment, NSE can do IPsec but that uses a lot of resorces on the router and would prevent us from tendering for the solution (Inc Wi-Fi, Switch); unless a NSE 4000 is right around the corner.
Unfortunately, we don’t have plans to add GRE in the short term. IPSEC is available as you noted but will be limited to around 600Mbps.
We hope Cambium is listening to end-users and wants to take NSE devices SERIOUSLY to compete against Meraki and Forti…
Perhaps the 4k and higher NSE hardware appliances can support GRE and also dynamic routing protocals. Leave the 3k appliance for small branch offices [where it belongs].
Also what about IPV6…
Should we be worried about future of NSE as technology solution being deployed from an MSP standpoint?
Hi Anthony,
Your feedback is very important and you are not alone in bringing up these points - it’s something that is on many NSE customers’ wish list. Most of these (IPv6, dynamic routing, higher end appliances) are planned for the NSE platform. One exception would be GRE, which is lower priority because we think IPSEC would be a better fit for L3 tunneling over the WAN and something like VXLAN for other scenarios like L2 overlays. We are open to revisiting this though if more use cases like the Cloudflare Magic WAN come up.
Hello Trevor,
I believe the customer in this use case wanted to use GRE as it’s a simpler protocol with fewer security features, so it would offset the slower speeds of the NSE 3000. If there were an NSE 4000 that could do basic IPSEC at 1Gbps, it would eliminate the need for GRE over IPSEC for this customer.