GRE tunnel through R82 ElasticXL

[Alex-]

R82 Take 107, ElasticXL.

Our customer has a GRE tunnel passing though ClusterXL without issues for a long time on the 5000 series on all versions up to R81.20.

They recently upgraded to the 9000 series and since then the GRE fails with the VPN blade reporting "Failure preparing tunnel creation, internal error".

We saw this first on Take 91 on which the migration occured, but upgrading to Take 107 doesn't change anything.

The GRE is going through the gateways, they are not an endpoint for any of those.

TAC case open since a few days. No indication yet if it's a known issue or something specific.

There are no SK for this specific error message.

[Chris_Atkinson]

sk184007 solved in T103 came to mind but you're now on a higher JHF unless there is a regression of sorts specific to EXL or a separate issue.

[Alex-]

Solved, thanks to TAC.

The persistence settings were set to "Keep all connections", and some change in the policy caused the GRE to match differently and somehow this got lost in translation.

The fix was two change the persistence settings to "Rematch connections" and install the policy twice. Once to activate the flag, the second time to actually trigger the rematch. Poof, the GRE went up immediately afterwards.