gre packet capture

  • 1
  • Question
  • Updated 8 months ago
  • Answered

When capturing on a Ruckus SCG-200 GRE DATA tunnel. Anyone knows how to capture filter on a client mac address?






Photo of koen verbeeck

koen verbeeck

  • 1 Post
  • 0 Reply Likes

Posted 10 months ago

  • 1
Photo of Michael Brado

Michael Brado, Official Rep

  • 2116 Posts
  • 297 Reply Likes
Sorry Koen, quite complicated to get thru the encapsulation and not available to the public.

Tech Support brings in DevEng under extreme need purposes.  If this is the case, please
open a ticket with your details.
Photo of koen verbeeck

koen verbeeck

  • 2 Posts
  • 0 Reply Likes
Hey Michael,

you are talking about the core L2oGRE tunnel right >> SCG data plane towards the core network (WLAN-GW) / internet? This one is encrypted and encaptulated right?

What about the LWAPP tunnel and Ruckus GRE tunnels between the access points and SCG, are those encrypted and encaptulated or just encaptulated?

Very interesting stuff :-)

Best regards,
Koen
Photo of Michael Brado

Michael Brado, Official Rep

  • 2116 Posts
  • 297 Reply Likes
LWAPP is also a WPA2/AES encrypted encapsulation between APs and Controllers, and then you're adding L2oGRE tunneling.
Hard to break into that kind of packet!
Photo of koen verbeeck

koen verbeeck

  • 2 Posts
  • 0 Reply Likes
In the Ruckus GRE tunnel, are the wireless data frames send as 802.11 frames from the AP to the SCG?

If no encryption is used on the Ruckus GRE tunnel then you should be able to sniff the traffic right? The frames would then just be encaptualted into an IP packet with IP SA = AP and DA = SCG access data plane ?