Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 12 Mar 2022 06:10:39 +0700
From:      Eugene Grosbein <eugen@grosbein.net>
To:        mlist@jarasoft.net, freebsd-stable@FreeBSD.org
Subject:   Re: GRE tunnel and a ipv4 subnet /29
Message-ID:  <403c0dbb-6d0b-21e9-9522-b03be1baa98b@grosbein.net>
In-Reply-To: <3ed8d7b9-efd1-9c79-4b21-a46cf7d17f85@jarasoft.net>
References:  <3ed8d7b9-efd1-9c79-4b21-a46cf7d17f85@jarasoft.net>

next in thread | previous in thread | raw e-mail | index | archive | help
12.03.2022 5:45, Jack Raats wrote:

> I have an ipv4 test subnet from extraip 37.x.y.0/29
> 
> My internet connection has ip-address a.b.c.d.
> I've a Fritxbox router and behind NAT is my FreeBSD server with ip-address 10.10.10.15.
> On this router I've opened the firewall for GRE to my FreeBSD server.
> On my FreeBSD server rc.conf has the following lines:
> 
> cloned_interfaces=“gre0”
> ifconfig_gre0=“inet 37.x.y.2 37.x.y.1 netmask 255.255.255.248 tunnel a.b.c.d gatewayip”
> static_routes=“tunnel”
> route_tunnel=“37.x.y.0/29 37.x.y.1”
> 
> This doesn't work. Whats wrong? Do I forget something?

You cannot use 37.x.x.2 for any interface on FreeBSD unless your upstream router (Fritxbox)
delivers packets to this IP address to FreeBSD *without* NAT.

Create static route for 37.x.x.2/32 with gateway address 10.10.10.15 in the routing table of Fritxbox.
If you enabled NAT-based forwarding of GRE protocon on Fritxbox, disable it. Then it should work.




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?403c0dbb-6d0b-21e9-9522-b03be1baa98b>