567
edits
Changes
Setting up a GRE over IPsec tunnel between RUTOS devices (view source)
Revision as of 14:54, 2 August 2023
, 14:54, 2 August 2023no edit summary
<li><b>Enabled</b> - ON.</li>
<li><b>Enabled</b> - ON.</li>
<li><b>Tunnel source</b> - select the network interface with Public IP which is used to establish GRE tunnel.</li>
<li><b>Tunnel source</b> - select the network interface with Public IP which is used to establish GRE tunnel.</li>
<li><b>Remote endpoint IP address</b> - Public IP address of remote (<i>Router 1</i>) device.</li>
<li><b>Remote endpoint IP address</b> - Public IP address of remote (<i>Router 2</i>) device.</li>
<li><b>MTU</b> - 1476</li>
<li><b>MTU</b> - 1476</li>
<li><b>Outbound key</b> - 12345 (must match other device's Inbound key)</li>
<li><b>Outbound key</b> - 12345 (must match other device's Inbound key)</li>
<li><b>Inbound key</b> - 12345 (must match other device's Outbound key)</li>
<li><b>Inbound key</b> - 12345 (must match other device's Outbound key)</li>
<li><b>Keep alive</b> - ON</li>
<li><b>Keep alive</b> - ON</li>
<li><b>Local GRE interface IP address</b> - 10.0.0.2</li>
<li><b>Local GRE interface IP address</b> - 10.0.0.1</li>
<li><b>Local GRE interface IP netmask</b> - 255.255.255.0</li>
<li><b>Local GRE interface IP netmask</b> - 255.255.255.0</li>
<li><b>Remote subnet IP address</b> - 192.168.2.0</li>
<li><b>Remote subnet IP address</b> - 192.168.4.0</li>
<li><b>Remote subnet netmask</b> - 255.255.255.0</li>
<li><b>Remote subnet netmask</b> - 255.255.255.0</li>
</ol>
</ol>
<li><b>Enabled</b> - ON.</li>
<li><b>Enabled</b> - ON.</li>
<li><b>Tunnel source</b> - select the network interface with Public IP which is used to establish GRE tunnel.</li>
<li><b>Tunnel source</b> - select the network interface with Public IP which is used to establish GRE tunnel.</li>
<li><b>Remote endpoint IP address</b> - Public IP address of remote (<i>Router 2</i>) device.</li>
<li><b>Remote endpoint IP address</b> - Public IP address of remote (<i>Router 1</i>) device.</li>
<li><b>MTU</b> - 1476</li>
<li><b>MTU</b> - 1476</li>
<li><b>Outbound key</b> - 12345 (must match other device's Inbound key)</li>
<li><b>Outbound key</b> - 12345 (must match other device's Inbound key)</li>
<li><b>Inbound key</b> - 12345 (must match other device's Outbound key)</li>
<li><b>Inbound key</b> - 12345 (must match other device's Outbound key)</li>
<li><b>Keep alive</b> - ON</li>
<li><b>Keep alive</b> - ON</li>
<li><b>Local GRE interface IP address</b> - 10.0.0.1</li>
<li><b>Local GRE interface IP address</b> - 10.0.0.2</li>
<li><b>Local GRE interface IP netmask</b> - 255.255.255.0</li>
<li><b>Local GRE interface IP netmask</b> - 255.255.255.0</li>
<li><b>Remote subnet IP address</b> - 192.168.4.0</li>
<li><b>Remote subnet IP address</b> - 192.168.2.0</li>
<li><b>Remote subnet netmask</b> - 255.255.255.0</li>
<li><b>Remote subnet netmask</b> - 255.255.255.0</li>
</ol>
</ol>
----
----
Router 2 configuration is identical to Router 1 configuration, except for:
Router 2 configuration is identical to Router 1 configuration, except for:
2.2. <b>Remote endpoint</b> - you may leave empty or enter Router 1 WAN IP.
3.2. <b>Bind to</b> - GRE2 (GRE)
3.2. <b>Bind to</b> - GRE2 (GRE)
Sometimes end devices might be unreachable even though GRE over IPsec connection is successfully established, to resolve this it might be needed to '''renew DHCP lease''' of end device or if it has multiple network adapters then '''increase metric priority''' of default gateway associated with RUT device.
Sometimes end devices might be unreachable even though GRE over IPsec connection is successfully established, to resolve this it might be needed to '''renew DHCP lease''' of end device or if it has multiple network adapters then '''increase metric priority''' of default gateway associated with RUT device.
[[Category:VPN]]
