Changes

no edit summary
Line 28: Line 28:  
[[File:How to add new gre tunnel instance v2.png]]
 
[[File:How to add new gre tunnel instance v2.png]]
 
----
 
----
* Click the "Edit" button located to the right of the newly created GRE Tunnel instance to enter the settings window. Bellow is capture of configurations for both GRE Tunnel instances:
+
* Click the "Edit" button located to the right of the newly created GRE Tunnel instance:
 +
 
 +
[[File:How to edit gre tunnel.png]]
 +
----
 +
* You will be redirected to the settings window where you can start configuring the GRE Tunnel instance. Bellow is capture of configurations for both GRE Tunnel instances:
    
[[File:Gre tunnel configuration example.png]]
 
[[File:Gre tunnel configuration example.png]]
    +
* Below are explanations of the parameters highlighted in the figure above. Other parameters (not highlighted) are defaults. You can find descriptions for these parameters in the '''[[VPN#GRE Tunnel|VPN manual page, GRE Tunnel section]]'''
 +
** '''Enable''' - enables the IPsec instance
 +
** '''Local IP address/Subnet mask''' - LAN IP address/Subnet mask of the router on which the IPsec instance is configured
 +
** '''Pre shared key''' - a shared password used for authentication between the peers. The value of this field must match on both instances
 +
** '''Remote VPN endpoint''' - the Public IP address of the opposite router
 +
** '''Remote IP address/Subnet mask''' - LAN IP address/Subnet mask of the opposite router
 +
** '''Enable keepalive''' - enables the tunnel's keep alive function. When enabled, the instance sends ICMP packets to the specified host at the specified frequency. If no response is received, the instance attempts to restart the connection
 +
*** '''Host''' - hostname or IP address to which ICMP packets will be sent to. Best to use a hostname/IP address belonging to the opposite instance's LAN. For this example we just use the other router's LAN IP address
 +
*** '''Ping period (sec)''' - the period (in seconds) at which ICMP packets will be sent to the specified host
 +
** '''Allow WebUI access''' - when checked, allows WebUI access for hosts from the opposite instance
 +
'''NOTE''': remember to replace certain parameter values (like IP addresses) with your own relevant data.
 
==See also==
 
==See also==