similar to: Re: traffic shaping and gre tunnels

Hi! I want to add to my previous post that: my setup looks like this internet --> linux router with NAT and tc ==> gre tunnel ==> forwarding router --> LAN At my NATting router I can "see" the forwarded LAN (192.168.2.0/24). Now let''s say that there is a LAN workstation with the IP 192.168.2.18 and I filter the traffic with tc for it. If the fowarding router has

Hi! I have successfully set up traffic shaping at our site using your and others howtos. I have a linux firewall (gateway), two leased lines. I shape only the incoming traffix now. I use HTB+SFQ and sort the packets using iptables with the CLASSIFY patch. It works very well. eth1----ISP2-\ eth2----ISP1--LINUX--internal network eth0 My problem is, that i can not shape my VPN (PPTP)

Hello, I''ve set up a GRE tunnel between two Linux boxes and it''s working well, with or without IPSEC (under GRE). The problem is that when I have no traffic for some minutes, side A cannot communicate to side B any more, unless side B tries to communidate to side A. The same thing happens in the other direction. For example, side A pings side B. No reply. Keep pinging. Side B

Hi, I have two systems each with 2 two gre tunnels over ipsec. The tunnels are setup to loadbalance using ''ip route''. Using ping from one server to the other I get equal results via the two gre tunnels, but when I try a large ftp transfer the utilization of one tunnel is 90% and the other 10%. The two interfaces are both 100/full. What would be the reason for this, or would

Hi , I am trying to set up a GRE tunnel between two linux routers. The routers have a 400 MHz Processor. Linux .2 65.0.0.2 Linux LAN1 -------- Router -------- INTERNET ---- Router ---- LAN2 10.10.10.0 .1 208.1.0.1 (Simulated) .1 .1 192.168.2.0/24 /24 Scripts to Create the tunnel ip tunnel add tun0 mode gre remote 65.0.0.1 local

Hi All, As it is written in the "Linux 2.4 Advanced Routing HOWTO" GRE tunneling has some benefits compare to IP-in-IP, on of it benefits is the ability to transport multicast traffic through a GRE tunnel. I used the mrouted daemon and I know that the daemon supports tunneling but I don''t want to use its tunneling method. Assuming I have gre0 as my tunneling device I did the

Hi Guys, Here is our patch to allow broadcast packets over a GRE tunnel. Hopefully it might be accepted into the source someday. You need to enabled bridging and GRE tunnels in your kernel. No other options are required. The gre patch determines what type of protocol type to put in the GRE header based on the whether the packet is forwarded from a bridge or not. To use the patch: # Create

Hi All: Ok, here is my network: 192.168.1.0/28 is the network behind the Cisco, the Gig0/1 interface is 192.168.1.1. Linux box is 192.168.1.96/28 behind with 192.168.1.97 the Eth1 interface. I have the Ipsec tunnel up and working between them using preshared keys. So that works. Here is the Cisco tunnel setup: interface Tunnel6 ip address 192.168.2.110 255.255.255.240 tunnel source

Hi, Does anyone tried to get ipip or gre tunnel behind NAT environments. ? i''m trying to make both side tunneling with ipip or gre with private address just like belows.. A -------------------FIRWWAL -------------------INET ------------------- B PRIVATE PUBLIC PUBLIC (10.100.0.1) (211.xxx.xxx.xxx) (

Looking for some advise from the experts out there. We do simple traffice shaping and I''m having trouble figuring out how to shape vpn traffic using a tc filter. The following filter works fine for SSH tc filter add dev eth2 parent 1:0 protocol ip u32 match ip sport 22 0xffff classid 1:10 The following throws and "Illegal match" error when trying to filter GRE traffic. tc

Hello! I''ve posted recently a question about shaping tunneled traffic. Now I ask a sorter question: I tried to add a HTB qdisc to a gre tunnel interface and after that there is no traffic going out into the tunnel. The classes, filters and qdiscs are ok. Does anyone know what else should I do for it to work? Then I tried to add a txqueuelen but with no effect (after the command completed,

Hey all, Anybody been successful running DHCPD on a GRE tunnel? When I tell DHCPD to listen on cisco1 I see this in the log Jul 23 16:21:03 atlantis dhcpd: cisco1: unknown hardware address type 778 Here is the output of ifconfig cisco1 Link encap:UNSPEC HWaddr 8B-8E-28-32-00-00-00-00-00-00-00-00-00-00-00-00 inet addr:10.199.0.2 P-t-P:10.199.0.2

Hi, I have the following setup. Two linux systems with two [test] external interfaces encrypted with ipsec [transport]. Two gre tunnels that pass 10.200.0.0/24 and 10.200.1.0/24 network traffic. Testing the balanced tunnels I would setup iptraf on one and ping from the other. The results would be as expected; traffic would be split between the two interfaces. Testing with an ftp transfer of

Hi, I have the following setup. Two linux systems with two [test] external interfaces encrypted with ipsec [transport]. Two gre tunnels that pass 10.200.0.0/24 and 10.200.1.0/24 network traffic. Testing the balanced tunnels I would setup iptraf on one and ping from the other. The results would be as expected; traffic would be split between the two interfaces. Testing with an ftp transfer of

Hi List, FYI. We have been using CentOS 6.4 and have 2 vpn/gre tunnels to separate cisco rtrs using ospf. with kernel 2.6.32-358.23.2 We have upgraded to 6.5 bit using kernel 2.6.32-431.5.1 and the exact same configuration scripts for our vpn/gre tunnels. What I see is the first gre tunnel works great and I get an ospf neighbor. The second tunnel comes up and I can ping across it and I see

Greetings, I''ve got a server with a bunch of vpn (openvpn) tunnels terminating on it. I''m trying to limit the total bandwidth the tunnels can use to 3mbit. So I applied a rule like this: ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ tc qdisc add dev eth0 root handle 1: htb default 90 tc class add dev eth0 parent 1: classid 1:1 htb rate 100mbit burst 15k # Default rule for

Hi everybody, I want to do the following setup : | | Tun1 - Link 1 | Tun1 | | Router A | teql | INTERNET Link - | | teql |router B | | Tun2 - Link 2 | Tun2 | | This should permit to agregate Link 1 and Link 2 (less the cost of the encapsulation). The two tunnels are GRE ip tunnel. It seems to work fine

I need to send multicast traffic through a GRE tunnel between two Linux routers. The tunnel works for normal IP packets, but I can''t see how to make it work for multicast. Here''s the setup: 10.10.10.0/24 LAN-B--------------RtrB-------------RtrC--------------LAN-C 192.168.2.0/24 192.168.1.0/24 RtrB interfaces: eth0

I am attempting to setup an IPSec protected GRE tunnel with a Cisco router. I believe the IPSec association is up, however I cannot move traffic over the tunnel. It is not clear how to integrate the tunnel interface (gre1) with firewall-cmd; adding the interface to trusted does not appear to 'stick'. [root at aqueduct ~]# firewall-cmd --add-interface=gre1 --zone=trusted The interface

Hi, In XenServer5.6 FP1 beta, I have switched default bridge to open vswitch, I wonder how to use "xe tunnel-create" to create a GRE tunnel. my commands: xe tunnel-create pif-uuid=eth0_uuid network-uuid=network_created_by_xe_network_create then I got an uuid which is "access-PIF" of output from "xe tunnel-list". what should I do next? how to set remote_ip