# Nse 3000 gre

**URL:** https://community.cambiumnetworks.com/t/nse-3000-gre/103707
**Category:** Next-Gen Firewall
**Created:** [January 22, 2025, 10:29am UTC](https://community.cambiumnetworks.com/t/nse-3000-gre/103707 "2025-01-22T10:29:44Z")
**Posts on this page:** 9
**Page:** 1

<div class="post-metadata">

### Author: ![James\_Mifsud](https://d10gw3vjmzyp8.cloudfront.net/user_avatar/community.cambiumnetworks.com/james_mifsud/32/25586_2.png) [@James\_Mifsud](https://community.cambiumnetworks.com/u/James_Mifsud)
#### Post date: [January 22, 2025, 10:29am UTC](https://community.cambiumnetworks.com/t/nse-3000-gre/103707/1 "2025-01-22T10:29:44Z")

</div>

Hello,

Does anyone know if the NSE 3000 can do GRE tunnelling? I can’t seem to see anything in the manual.

Thanks

---

<div class="post-metadata">

### Author: ![TrevorM](https://d10gw3vjmzyp8.cloudfront.net/letter_avatar_proxy/v4/letter/t/3ec8ea/32.png) [@TrevorM](https://community.cambiumnetworks.com/u/TrevorM)
#### Post date: [January 23, 2025, 12:06am UTC](https://community.cambiumnetworks.com/t/nse-3000-gre/103707/2 "2025-01-23T00:06:36Z")

</div>

GRE tunneling is not supported

---

<div class="post-metadata">

### Author: ![James\_Mifsud](https://d10gw3vjmzyp8.cloudfront.net/user_avatar/community.cambiumnetworks.com/james_mifsud/32/25586_2.png) [@James\_Mifsud](https://community.cambiumnetworks.com/u/James_Mifsud)
#### Post date: [January 23, 2025, 10:24am UTC](https://community.cambiumnetworks.com/t/nse-3000-gre/103707/3 "2025-01-23T10:24:12Z")

</div>

☹

nothing in the roadmap?

---

<div class="post-metadata">

### Author: ![TrevorM](https://d10gw3vjmzyp8.cloudfront.net/letter_avatar_proxy/v4/letter/t/3ec8ea/32.png) [@TrevorM](https://community.cambiumnetworks.com/u/TrevorM)
#### Post date: [January 23, 2025, 7:53pm UTC](https://community.cambiumnetworks.com/t/nse-3000-gre/103707/4 "2025-01-23T19:53:35Z")

</div>

Could you please elaborate on the use case for this? Is it an overlay LAN network for Wi-Fi APs, tunneling over the internet, or something else.

---

<div class="post-metadata">

### Author: ![James\_Mifsud](https://d10gw3vjmzyp8.cloudfront.net/user_avatar/community.cambiumnetworks.com/james_mifsud/32/25586_2.png) [@James\_Mifsud](https://community.cambiumnetworks.com/u/James_Mifsud)
#### Post date: [January 25, 2025, 7:49am UTC](https://community.cambiumnetworks.com/t/nse-3000-gre/103707/5 "2025-01-25T07:49:55Z")

</div>

It’s for a Cloudflare Magic WAN deployment, NSE can do IPsec but that uses a lot of resorces on the router and would prevent us from tendering for the solution (Inc Wi-Fi, Switch); unless a NSE 4000 is right around the corner.

[GRE and IPsec tunnels · Cloudflare Magic WAN docs](https://developers.cloudflare.com/magic-wan/reference/tunnels/#:~:text=Magic%20WAN%20uses%20Generic%20Routing,routers%20at%20your%20data%20center).

---

<div class="post-metadata">

### Author: ![TrevorM](https://d10gw3vjmzyp8.cloudfront.net/letter_avatar_proxy/v4/letter/t/3ec8ea/32.png) [@TrevorM](https://community.cambiumnetworks.com/u/TrevorM)
#### Post date: [January 27, 2025, 9:33pm UTC](https://community.cambiumnetworks.com/t/nse-3000-gre/103707/6 "2025-01-27T21:33:21Z")

</div>

Unfortunately, we don’t have plans to add GRE in the short term. IPSEC is available as you noted but will be limited to around 600Mbps.

---

<div class="post-metadata">

### Author: ![ntox](https://d10gw3vjmzyp8.cloudfront.net/letter_avatar_proxy/v4/letter/n/9d8465/32.png) [@ntox](https://community.cambiumnetworks.com/u/ntox)
#### Post date: [January 29, 2025, 2:58pm UTC](https://community.cambiumnetworks.com/t/nse-3000-gre/103707/7 "2025-01-29T14:58:07Z")

</div>

@TrevorM

We hope Cambium is listening to end-users and wants to take NSE devices SERIOUSLY to compete against Meraki and Forti…

Perhaps the 4k and higher NSE hardware appliances can support GRE and also dynamic routing protocals. Leave the 3k appliance for small branch offices [where it belongs].

Also what about IPV6…

Should we be worried about future of NSE as technology solution being deployed from an MSP standpoint?

---

<div class="post-metadata">

### Author: ![TrevorM](https://d10gw3vjmzyp8.cloudfront.net/letter_avatar_proxy/v4/letter/t/3ec8ea/32.png) [@TrevorM](https://community.cambiumnetworks.com/u/TrevorM)
#### Post date: [January 29, 2025, 9:35pm UTC](https://community.cambiumnetworks.com/t/nse-3000-gre/103707/8 "2025-01-29T21:35:39Z")

</div>

Hi Anthony,

Your feedback is very important and you are not alone in bringing up these points - it’s something that is on many NSE customers’ wish list. Most of these (IPv6, dynamic routing, higher end appliances) are planned for the NSE platform. One exception would be GRE, which is lower priority because we think IPSEC would be a better fit for L3 tunneling over the WAN and something like VXLAN for other scenarios like L2 overlays. We are open to revisiting this though if more use cases like the Cloudflare Magic WAN come up.

---

<div class="post-metadata">

### Author: ![James\_Mifsud](https://d10gw3vjmzyp8.cloudfront.net/user_avatar/community.cambiumnetworks.com/james_mifsud/32/25586_2.png) [@James\_Mifsud](https://community.cambiumnetworks.com/u/James_Mifsud)
#### Post date: [January 29, 2025, 10:56pm UTC](https://community.cambiumnetworks.com/t/nse-3000-gre/103707/9 "2025-01-29T22:56:34Z")

</div>

Hello Trevor,

I believe the customer in this use case wanted to use GRE as it’s a simpler protocol with fewer security features, so it would offset the slower speeds of the NSE 3000. If there were an NSE 4000 that could do basic IPSEC at 1Gbps, it would eliminate the need for GRE over IPSEC for this customer.
