Right now, are no features to setup through the Alta controller the Route10 that would allow L2 to L2 networks extensions over Internet (L3) connections.
Look like in R10 we see native gre / vxlan support in linux kernel ( oldest 5.4.213 ) and this is accelerated via qca_nss_ppe !
root@R10:~# lsmod | grep gre
gre 16384 3 ip6_gre,ip_gre,pptp
ip_gre 32768 1 qca_nss_ppe_gretap
ip_tunnel 24576 1 ip_gre
ip6_gre 36864 0
ip6_tunnel 40960 2 qca_nss_ppe_tunipip6,ip6_gre
qca_nss_ppe_gretap 16384 0
qca_nss_ppe_tun 36864 5 qca_nss_ppe_tunipip6,qca_nss_ppe_vxlanmgr,qca_nss_ppe_mapt,qca_nss_ppe_l2tp,qca_nss_ppe_gretap
sch_ingress 16384 0
root@R10:~# lsmod | grep vxlan
ip6_udp_tunnel 16384 3 wireguard,l2tp_core,vxlan
qca_nss_ppe_tun 36864 5 qca_nss_ppe_tunipip6,qca_nss_ppe_vxlanmgr,qca_nss_ppe_mapt,qca_nss_ppe_l2tp,qca_nss_ppe_gretap
qca_nss_ppe_vxlanmgr 24576 0
udp_tunnel 16384 3 wireguard,l2tp_core,vxlan
vxlan 57344 2 ecm,qca_nss_ppe_vxlanmgr
By hands this is really easy,it up and running,we can see L2 traffic passing from both sides.
ip link add grelan0 type gretap local R10-pub-IP remote inux-pub-remote-side-IP
ip link set grelan0 up
brctl addif br-lan_2 grelan0
root@R10:/etc# tcpdump -ni eth3 ip proto gre
tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
listening on eth3, link-type EN10MB (Ethernet), capture size 262144 bytes
11:43:57.133317 IP 88.203.195.14 > 192.168.100.2: GREv0, length 46: ARP, Request who-has 172.17.250.26 tell 172.17.250.1, length 28
11:43:58.156928 IP 88.203.195.14 > 192.168.100.2: GREv0, length 46: ARP, Request who-has 172.17.250.26 tell 172.17.250.1, length 28
11:44:15.565566 IP 88.203.195.14 > 192.168.100.2: GREv0, length 46: ARP, Request who-has 172.17.250.26 tell 172.17.250.1, length 28
11:44:15.602629 IP 192.168.100.2 > 88.203.195.14: GREv0, length 102: IP 172.17.250.2 > 172.17.250.1: ICMP echo request, id 16877, seq 0, length 64
11:44:15.608395 IP 88.203.195.14 > 192.168.100.2: GREv0, length 102: IP 172.17.250.1 > 172.17.250.2: ICMP echo reply, id 16877, seq 0, length 64
11:44:16.588954 IP 88.203.195.14 > 192.168.100.2: GREv0, length 46: ARP, Request who-has 172.17.250.26 tell 172.17.250.1, length 28
11:44:16.602843 IP 192.168.100.2 > 88.203.195.14: GREv0, length 102: IP 172.17.250.2 > 172.17.250.1: ICMP echo request, id 16877, seq 1, length 64
11:44:16.608883 IP 88.203.195.14 > 192.168.100.2: GREv0, length 102: IP 172.17.250.1 > 172.17.250.2: ICMP echo reply, id 16877, seq 1, length 64
11:44:19.280314 IP 88.203.195.14 > 192.168.100.2: GREv0, length 46: ARP, Request who-has 172.17.250.26 tell 172.17.250.1, length 28
Alta,please add EoGRE ( Ethernet over GRE) and VxLAN ( Virtual eXtensible Local Area Network) .
Here is not tunnelling options at all.