Skip to main content

Search

Cloudi-Fi Knowledge Base

How to modify Zscaler GRE tunnels destination datacenters

Alexandre de THOMASSON
  • Updated

Overview

This article explains how to change the primary and secondary Zscaler data centers that a GRE tunnel connects to.

Scope: This procedure applies to Zscaler tenants managed by Cloudi-Fi, which you access through the Cloudi-Fi Admin interface. If you use your own existing Zscaler tenant, make the same change directly in your Zscaler Experience Center.

Warning: plan a maintenance window. Changing the destination data centers changes the GRE tunnel endpoint IPs. The tunnels on your router or firewall must then be updated with the new destination IPs. Until they are, guest traffic through these tunnels is interrupted.

Log in to the Zscaler Experience Center

  • Navigate to your Cloudi-Fi admin console
  • Select "Settings"
  • Choose "Integrations"
  • Click on "Zscaler."

  • Press the "Visit Administration" button to access the Zscaler Experience Center

    Zscaler Admin Access via Cloudi-Fi

Locate the GRE tunnel

Navigate to Infrastructure > Location Management > Static IPs & GRE Tunnel menu.

Identify and select the specific GRE tunnel to change the destination data centers and proceed to edit the relevant GRE tunnel.

Select destination IPs

Choose destination IPs based on the Datacenter selected.

Select a primary and a secondary destination data center. Choose two different data centers so the secondary tunnel still works if the primary data center is unavailable. 

Save and activate

  1. Click Save.
  2. Click Activate (top-right of the Zscaler Experience Center). Changes are not applied until they are activated.
  3. Update the GRE tunnel destination IPs on your router or firewall with the new values shown for the tunnel.
  4. Check that both tunnels come back up.

Destination Datacenter not available in the list

If the desired Zscaler datacenter does not appear in the Destination Datacenter list, this is usually related to the city configured for the Static IP.

The available destinations are filtered based on the Static IP city. If needed, edit the Static IP and change its City, then return to the GRE tunnel configuration and reopen the destination list.

Changing the city does not impact traffic or tunnel behavior; it only affects the suggested datacenters.

What's Next

If you've successfully modified the Zscaler GRE Tunnels destination data centers, you've completed the necessary steps to optimize your network configuration. 

For more information on Cloudi-Fi's solution partnership with Zscaler, visit our Zscaler Partner page.