159
edits
Changes
Setting up a GRE over IPsec tunnel between RUTOS devices (view source)
Revision as of 14:07, 13 May 2024
, 13 May→Router 1 GRE configuration
<li><b>Remote endpoint IP address</b> - Public IP address of remote (<i>Router 2</i>) device.</li>
<li><b>Remote endpoint IP address</b> - Public IP address of remote (<i>Router 2</i>) device.</li>
<li><b>MTU</b> - 1476</li>
<li><b>MTU</b> - 1476</li>
<li><b>Outbound key</b> - 12345 (must match other device's Inbound key)</li>
<li><b>Outbound key</b> - 12345 Limit:4294967295 (must match other device's Inbound key)</li>
<li><b>Inbound key</b> - 12345 (must match other device's Outbound key)</li>
<li><b>Inbound key</b> - 12345 Limit:4294967295 (must match other device's Outbound key)</li>
<li><b>Keep alive</b> - ON</li>
<li><b>Keep alive</b> - ON</li>
<li><b>Local GRE interface IP address</b> - 10.0.0.1</li>
<li><b>Local GRE interface IP address</b> - 10.0.0.1</li>
<li><b>Remote endpoint IP address</b> - Public IP address of remote (<i>Router 1</i>) device.</li>
<li><b>Remote endpoint IP address</b> - Public IP address of remote (<i>Router 1</i>) device.</li>
<li><b>MTU</b> - 1476</li>
<li><b>MTU</b> - 1476</li>
<li><b>Outbound key</b> - 12345 (must match other device's Inbound key)</li>
<li><b>Outbound key</b> - 12345 Limit:4294967295 (must match other device's Inbound key) </li>
<li><b>Inbound key</b> - 12345 (must match other device's Outbound key)</li>
<li><b>Inbound key</b> - 12345 Limit:4294967295 (must match other device's Outbound key)</li>
<li><b>Keep alive</b> - ON</li>
<li><b>Keep alive</b> - ON</li>
<li><b>Local GRE interface IP address</b> - 10.0.0.2</li>
<li><b>Local GRE interface IP address</b> - 10.0.0.2</li>
Sometimes end devices might be unreachable even though GRE over IPsec connection is successfully established, to resolve this it might be needed to '''renew DHCP lease''' of end device or if it has multiple network adapters then '''increase metric priority''' of default gateway associated with RUT device.
Sometimes end devices might be unreachable even though GRE over IPsec connection is successfully established, to resolve this it might be needed to '''renew DHCP lease''' of end device or if it has multiple network adapters then '''increase metric priority''' of default gateway associated with RUT device.
[[Category:VPN]]
