567
edits
Changes
Setting up a GRE over IPsec tunnel between RUTOS devices (view source)
Revision as of 14:54, 2 August 2023
, 14:54, 2 August 2023no edit summary
<li><b>Inbound key</b> - 12345 (must match other device's Outbound key)</li>
<li><b>Inbound key</b> - 12345 (must match other device's Outbound key)</li>
<li><b>Keep alive</b> - ON</li>
<li><b>Keep alive</b> - ON</li>
<li><b>Local GRE interface IP address</b> - 10.0.0.2</li>
<li><b>Local GRE interface IP address</b> - 10.0.0.1</li>
<li><b>Local GRE interface IP netmask</b> - 255.255.255.0</li>
<li><b>Local GRE interface IP netmask</b> - 255.255.255.0</li>
<li><b>Remote subnet IP address</b> - 192.168.2.0</li>
<li><b>Remote subnet IP address</b> - 192.168.4.0</li>
<li><b>Remote subnet netmask</b> - 255.255.255.0</li>
<li><b>Remote subnet netmask</b> - 255.255.255.0</li>
</ol>
</ol>
<li><b>Inbound key</b> - 12345 (must match other device's Outbound key)</li>
<li><b>Inbound key</b> - 12345 (must match other device's Outbound key)</li>
<li><b>Keep alive</b> - ON</li>
<li><b>Keep alive</b> - ON</li>
<li><b>Local GRE interface IP address</b> - 10.0.0.1</li>
<li><b>Local GRE interface IP address</b> - 10.0.0.2</li>
<li><b>Local GRE interface IP netmask</b> - 255.255.255.0</li>
<li><b>Local GRE interface IP netmask</b> - 255.255.255.0</li>
<li><b>Remote subnet IP address</b> - 192.168.4.0</li>
<li><b>Remote subnet IP address</b> - 192.168.2.0</li>
<li><b>Remote subnet netmask</b> - 255.255.255.0</li>
<li><b>Remote subnet netmask</b> - 255.255.255.0</li>
</ol>
</ol>
----
----
Router 2 configuration is identical to Router 1 configuration, except for:
Router 2 configuration is identical to Router 1 configuration, except for:
2.2. <b>Remote endpoint</b> - you may leave empty or enter Router 1 WAN IP.
3.2. <b>Bind to</b> - GRE2 (GRE)
3.2. <b>Bind to</b> - GRE2 (GRE)
Sometimes end devices might be unreachable even though GRE over IPsec connection is successfully established, to resolve this it might be needed to '''renew DHCP lease''' of end device or if it has multiple network adapters then '''increase metric priority''' of default gateway associated with RUT device.
Sometimes end devices might be unreachable even though GRE over IPsec connection is successfully established, to resolve this it might be needed to '''renew DHCP lease''' of end device or if it has multiple network adapters then '''increase metric priority''' of default gateway associated with RUT device.
[[Category:VPN]]
