Manual:Interface/Gre6: Difference between revisions

From MikroTik Wiki
Jump to navigation Jump to search
(gre6)
 
 
(4 intermediate revisions by one other user not shown)
Line 1: Line 1:
{{Versions|v5.11+}}
__TOC__
==Summary==
==Summary==
<p id="shbox"><b>Sub-menu:</b> <code>/interface gre6</code>
<p id="shbox"><b>Sub-menu:</b> <code>/interface gre6</code>
</p>
<br />
<br />
Interface ''gre6'' is a Generic Routing Encapsulation (GRE) tunnel over IPv6 network. It can encapsulate IPv4 or IPv6 network packets and transfer them over the tunnel.
Interface ''gre6'' is a Generic Routing Encapsulation (GRE) tunnel over IPv6 network. It can encapsulate IPv4 or IPv6 network packets and transfer them over the tunnel.


Line 12: Line 18:


{{Mr-arg-table
{{Mr-arg-table
|arg=arp
|arg=clamp-tcp-mss
|type=disabled {{!}} enabled {{!}} proxy-arp {{!}} reply-only
|type=yes {{!}} no
|default=
|default=yes
|desc=Address Resolution Protocol mode
|desc=
}}
}}


Line 29: Line 35:
|type=yes {{!}} no
|type=yes {{!}} no
|default=no
|default=no
|desc=Whether tunnel is enabled.
|desc=Enables/disables tunnel.
}}
 
{{Mr-arg-table
|arg=dscp
|type=inherit {{!}}  integer [0-63]
|default=
|desc=Set dscp value in Gre header to a fixed value or inherit from dscp value taken from tunnelled traffic
}}
 
{{Mr-arg-table
|arg=ipsec-secret
|type=string
|default=
|desc=When secret is specified, router adds dynamic ipsec peer to remote-address with pre-shared key and policy with default values (by default phase2 uses sha1/aes128cbc). Both local-address and remote-address of the tunnel must be specified for router to create valid ipsec policy.
}}
}}


Line 50: Line 70:
|type=IP
|type=IP
|default=
|default=
|desc=IPv6 addres that will be used as local tunnel end.
|desc=IPv6 address that will be used as local tunnel end.
}}
}}


Line 73: Line 93:
|desc=IP address of remote tunnel end.
|desc=IP address of remote tunnel end.
}}
}}
==Example==
on router 1:
/interface gre6 add local-address=2001:db8:bad:ee1::a remote-address=2001:db8:f00:baa::b keepalive=5
on router 2:
/interface gre6 add local-address=2001:db8:f00:baa::b remote-address=2001:db8:bad:ee1::a keepalive=5
[[Category:Manual|E]]
[[Category:VPN|E]]
[[Category:Interface|E]]

Latest revision as of 10:23, 9 June 2015

Version.png

Applies to RouterOS: v5.11+

Summary

Sub-menu: /interface gre6


Interface gre6 is a Generic Routing Encapsulation (GRE) tunnel over IPv6 network. It can encapsulate IPv4 or IPv6 network packets and transfer them over the tunnel.


Properties

Property Description
clamp-tcp-mss (yes | no; Default: yes)
comment (string; Default: ) Short description of the tunnel.
disabled (yes | no; Default: no) Enables/disables tunnel.
dscp (inherit | integer [0-63]; Default: ) Set dscp value in Gre header to a fixed value or inherit from dscp value taken from tunnelled traffic
ipsec-secret (string; Default: ) When secret is specified, router adds dynamic ipsec peer to remote-address with pre-shared key and policy with default values (by default phase2 uses sha1/aes128cbc). Both local-address and remote-address of the tunnel must be specified for router to create valid ipsec policy.
keepalive (integer [1..4294967295]; Default: ) Tunnel keepalive timeout in seconds. By default keepalive is disabled.
l2mtu (integer [0..65536]; Default: 65535) Layer2 Maximum transmission unit.
local-address (IP; Default: ) IPv6 address that will be used as local tunnel end.
mtu (integer [0..65536]; Default: 1476) Layer3 Maximum transmission unit.
name (string; Default: ) Name of the tunnel.
remote-address (IP; Default: ) IP address of remote tunnel end.

Example

on router 1:

/interface gre6 add local-address=2001:db8:bad:ee1::a remote-address=2001:db8:f00:baa::b keepalive=5

on router 2:

/interface gre6 add local-address=2001:db8:f00:baa::b remote-address=2001:db8:bad:ee1::a keepalive=5