Questions tagged [tunnel]

For questions about network tunnels.

Filter by
Sorted by
Tagged with
4
votes
1answer
650 views

How IPsec tunnel mode work without GRE

IPsec tunnel mode encrypt a whole IP packet and sends it as the payload of another IP packet. I have always used GRE as the encapsulation layer when doing IPsec encryption. However, how could I have ...
1
vote
0answers
632 views

Why do the tunnel protocol on these two router show different values

Two routers R1 and R2 have a tunnel built between them in the 103.103.103.0/24 network. The end point of the tunnel are 75.75.75.2(on R1) and 76.76.76.2(on R2). Can anyone explain why does the Tunnel ...
1
vote
1answer
29 views

Does “tunnel” here mean the same as tunnelling as in SSH?

From book Data and Computer Communication Tunnel Unlike the proxy and the gateway, the tunnel performs no operations on HTTP requests and responses. Instead, a tunnel is simply a relay point ...
2
votes
1answer
133 views

Wireguard protocol understanding where the packet got sent

From the docs, WireGuard associates tunnel IP addresses with public keys and remote endpoints. When the interface sends a packet to a peer, it does the following: This packet is meant for ...
2
votes
2answers
220 views

Wireguard protocol understanding source of the received packet

From the docs, WireGuard associates tunnel IP addresses with public keys and remote endpoints. When the interface sends a packet to a peer, it does the following: This packet is meant for ...
2
votes
2answers
1k views

bird bgp metric distance

In my lab I have two routers which are connected to different ISPs. They're not directly connected via a wire, but they're connected via a tunnel. Through that tunnel I used to create an iBGP peer ...
2
votes
1answer
90 views

Why specify the source tunnel address?

http://www.firewall.cx/cisco-technical-knowledgebase/cisco-routers/868-cisco-router-gre-ipsec.html Let me use the same example as in my previous question. R1(config)# interface Tunnel0 R1(config-if)#...
3
votes
2answers
943 views

What problem does GRE solve?

As per the RFC, GRE (Generic Routing Encapsulation) specifies a protocol for encapsulation of an arbitrary protocol over another arbitrary network layer protocol. I don't think I understand why GRE ...
2
votes
1answer
164 views

How would "looping" in GRE occur according to RFC 2784

RFC 2784 mentions: Care should be taken when forwarding such a packet, since if the destination address of the payload packet is the encapsulator of the packet (i.e., the other end of the tunnel), ...
6
votes
4answers
18k views

Tunnel interface bandwidth?

I am a little confused with the bandwidth setting on Tunnel interfaces between two Cisco devices. On each end I have Cisco routers with ten gig interfaces connected to my provider. I Have a tunnel ...
1
vote
1answer
46 views

Network Security Tunnel

In the Tunnel Interface, when I edit the tunnel information, it shows: Attributes Values Tunnel Source IF10 Tunnel Destination 1.0.0.1 Tunnel Mode GRE What does IF10 ...
4
votes
1answer
583 views

Scaling VXLAN tunnels in openvswitch

As we're creating a cluster of tens of KVM host nodes we've chosen openvswitch as our virtual network infrastructure. So we need to make isolated virtual networks between VMs on demand. I've seen ...
1
vote
0answers
378 views

OSPF over IPIP tunnel doesn't work for CSR 1000v in AWS

I literally have the following topology shown in the figure below. I have 4 VPCs, each VPC has 3 subnets (1 for the VM instance and the other 2 for interfaces). Each VPC hosts a Cisco CSR 1000v in ...
1
vote
1answer
36 views

Is it possible to implement virtual network based on MAC in IP instead of MAC in UDP?

We know that flannel use MAC in UDP to create a overlay network. My question is: UDP header only provides an extra port number fields, let's suppose that one physical machine only run one flanneld ...
0
votes
1answer
700 views

How to create interfaces for CSR 1000v for GRE tunnels?

Well, my idea is to connect to 4 CSR 1000v routers in different VPC (without VPC peering). I've basically finished with everything with the pre-configuration creating VPCs, subnets IGW, modifying ...
1
vote
0answers
76 views

Using IPv6 6in4 tunnel with multiple VLANs, or LAN Interfaces?

I have a pfSense router, and I've setup a Hurricane 6in4 IPv6 tunnel by following this guide: http://thirdinternet.com/wp-content/uploads/2017/11/Configure-6in4-Tunnel-in-pfSense.pdf It all seems to ...
1
vote
0answers
25 views

VPN Configuration [closed]

Im trying to reach a network at a remote site. I need to have my machine configured to have access to equipment on this network(not computers). I have a debian machine located on this network but the ...
0
votes
1answer
232 views

Can't connect between an IPV6 network and an added IPV4 router

I have a very simple topology, where 4 routers use IPV6 and RIP, there aren't problems and all devices have connectivity. The issue is if I add another router this time using IPV4 for clients. I ...
0
votes
1answer
983 views

Configuring IPsec VPN and TTL

I have two sites, each using their own firewall. Once a Cisco Meraki, another a Cisco ASA. The two sites use IPsec to establish a VPN tunnel. The Question: If each of the two sites have different ...
1
vote
2answers
2k views

Command "ip nhrp map multicast dynamic" is not being saved into the configuration

For some reason, my Cisco router is not saving the command "ip nhrp map multicast dynamic". The command is recognized but not being saved to the configuration. I am not receiving any errors. Any ...
1
vote
2answers
245 views

ESP in tunnel mode

When Encapsulating Security Payload (ESP) is used in the tunnel mode, a new IP header is computed and added. Why is this necessary? Thank you.
0
votes
1answer
151 views

Is it possible to append custom data to every packet of a request? [closed]

For an end-to-site VPN, i.e. where a device (VPN client) is responsible for encapsulating the GRE packet, is it possible to send some custom data along with the GRE packet beyond just the standard ...
1
vote
1answer
122 views

ISATAP configuration not working when adding hosts

I am trying to make an ISATAP configuration where two ipv6 hosts connected to dual stacked routers can communicate to each other. I have the following configuration: I have configured RIP across ...
1
vote
1answer
835 views

How to use ACL to deny sending packages to the GRE tunnel?

I need to do a small lab. The topology is shown on the image below: What I need to do, is make static routing so all routers can ping each neighbour's physical interface, configure a GRE tunnel ...
3
votes
3answers
573 views

Layer 3 tunnel with Dynamic IP address

I want to ask whether it is possible to configure Layer 3 Tunnel with the two end points/interfaces have dynamic IP address? If the interface IP change, the tunnel will have to be re-negotiated, is ...
3
votes
1answer
102 views

How to connect servers from different Datacentres via firewall

really need help since I am still new in firewall. I have 2 firewall located in two separate Datacentres. I need to make a connection for the servers from these 2 DCs. One firewall is running pfsense ...
3
votes
2answers
711 views

OSPF on tunnel interfaces

Can I keep different tunnel interfaces in different OSPF areas. Keep in mind that the physical interface is going to be the same
12
votes
2answers
11k views

VXLAN vs VLAN over layer 3

I read that one of the benefits of VXLAN over VLAN is that it can spawn across WAN and multiple layer 3 networks by creating overlay layer 2 networks. However AFAIN VLAN can also do the same using ...
1
vote
1answer
2k views

"Gateway of last resort is not set" even though I have a default route to a tunnel interface

I work with Cisco CSRs. On all of my previous CSRs in AWS, I have the following: AWS-ENV-CSR-R1#sh run | in ip route ip route 0.0.0.0 0.0.0.0 Tunnel1 ip route 0.0.0.0 0.0.0.0 Tunnel2 2 AWS-ENV-CSR-...
2
votes
2answers
1k views

public ip across ipsec vpn tunnel

two sites connected ip sec vpn tunnel. site A has 16 static ip addresses for outside to in access (NAT). can I route one of my public ip addresses from site A across vpn tunnel to a host on site B?
5
votes
3answers
3k views

Cisco QinQ - More than one provider vlan (s-vlan) on dot1q-tunnel port

When we configure a qinq tunneling, the port, which performs the encapsulation, has the next command-lines: interface g0/10 switchport switchport mode dot1q-tunnel switchport access vlan xxx &...
6
votes
2answers
338 views

What are the correct protocol versions (v4 vs v6) for packets inside DS-Lite tunnels?

I work for a company that develops Deep Packet Inspection tools. One of our customers, big ISP who has a large number of DS-Lite connected subscribers, was using our DPI engine to collect statistics ...
3
votes
1answer
15k views

ASA tunnel up but not passing traffic

I have two offices (Victoria at IP 1.2.3.4 and Toronto at IP 5.6.7.8) each with pfSense running Strongswan, and each with an IKEv2 IPSec tunnel back to a Cisco ASA 5512 at IP 9.8.7.6. I recently ...
1
vote
1answer
898 views

Cisco 5506-x dynamic site to site tunnel doesn't works

I am followed ASA-to-ASA Dynamic-to-Static IKEv1/IPsec Configuration Example step by step, currently I am using IP address 10.0.0.1 for the static peer and 10.0.0.2 for the dynamic peer, but seems ...
1
vote
1answer
743 views

Tunneling HTTP request over SSH [closed]

I'm having this webserver inside my network behind a firewall. I also have this VPS outside my network, which is publicly reachable. Now, I was wondering if it would be possible to tunnel a connection ...
3
votes
2answers
630 views

How to solve this IPv6 looping problem?

I have set up a 6in4 tunnel, namely "sit1", but I have discovered that if I traceroute non exist IP within the subnet, it will loop. What should I do to solve this? The routing table:
4
votes
1answer
278 views

Identifying teredo packets and teredo relay port

I'm trying to identify teredo packets on a network, and I'm getting conflicting information on whether or not the Teredo relay machine, which sends the actual ipv6 encapsulated traffic, listens on ...
2
votes
1answer
7k views

Which VPN Types/Protocols inherently support Multicast Traffic?

At my work, we build mobile networks from scratch for customers regularly. (Mobile Networks: think battery powered LTE router with wifi.) Since we build from scratch we can be vendor agnostic and ...
1
vote
1answer
160 views

Help understanding "tunneling"

Tunneling = allows a network user to access or provide a network service that the underlying network does not support or provide directly (wikipedia) How does the "network service" not support a ...
1
vote
1answer
407 views

VPN Hardware Client with Split Tunneling (How do I design this?)

I want to implement a network design for my home office that has the capabilities of connecting to a VPN or Tunneling service and performs Split Tunneling within the network appliances. The reason ...
2
votes
1answer
985 views

MPLS over GRE tunnel with Linux iproute2 [closed]

I'm trying to encapsulate IP packets in MPLS, transported over a GRE tunnel between two Linux hosts (a and b). a has 10.199.0.1 on GRE tunnel interface foo4, while b has 10.199.0.2 on GRE tunnel ...
0
votes
1answer
270 views

Same offset in fragmented IP packets when using Covert channel

I am currently experimenting which Tunnelshell. So, I launched it on the victim and on the attacker, executed a command via the Tunnelshell and captured the traffic via Wireshark to see what's going ...
14
votes
3answers
16k views

how to block ssh tunneling traffic?

if someone were to set up an ssh tunnel to/from work or home, is there a way to prevent future SSH tunneling traffic? I understand that websense can block traffic, but users who use ssh tunneling can ...
0
votes
2answers
777 views

Configure tunnel between IPv6 enabled server and local IPv4 network

I am newbie here and also for IPv6 network. I have one debian installed server which is able to send IPv6 traffic. Now in my local network, ISP not supporting IPv6 traffic. I want to configure tunnel ...
5
votes
3answers
3k views

Network Tunneling - why do we need it?

I have researched the topic of Network Tunnel but the information on this is rather confusing and inconsistent. So could someone please explain: In general, What is tunneling? Is it simply an act of ...
1
vote
1answer
486 views

Why is L2TP based on PPP and not PPPoE?

I'm trying to grasp why L2TP is based on PPP. I thought PPP was a protocol for point-to-point situations where you don't have Ethernet. So why/how is L2TP using PPP in order to establish communication ...
2
votes
1answer
957 views

Different tunnel modes (protected with ipsec)

I’m doing a connection of 2 sites in ipv6 over an ipv4 network. I thought to do a tunnel between this 2 sites and protect it with IPsec. But I saw there are different types of tunnels (by default GRE):...
2
votes
1answer
3k views

Two GRE tunnels in one subnet

http://www.firewall.cx/cisco-technical-knowledgebase/cisco-routers/868-cisco-router-gre-ipsec.html In the example above, R1: R1(config)# interface Tunnel0 R1(config-if)# ip address 172.16.0.1 255....
3
votes
2answers
577 views

Site-to-Site VPN tunnel configuration

I remember in uni that we implemented VPN tunnels always on the border routers and then use GRE tunnels to connect between two remote subnets. I was always told that VPN tunnels need to know the ...
2
votes
1answer
712 views

Two way IPSec tunneling

I would like to implement two VPNs on the same interface of a router. The router in question is router A which has one public interface Fa0/0 with IP: 22.33.44.55 (ex). First IPSec tunnel is a LAN-...