Results 1 to 3 of 3
  1. #1
    Untangler
    Join Date
    Feb 2013
    Posts
    83

    Default IPSEC over GRE is it supported?

    Dear Team,
    I have created a GRE tunnel between UT and Mikrotik

    GRE works fine

    Now I have created IPSEC policy over GRE
    as soon as i enable IPSEC configuration stops working, in IPSEC I use:

    Mode: Transport
    Remote network - Mikrotik_External_IP/32
    Local Network: UT_External_IP/32

    VPN state says active, but no ping or trace route can be done
    If i disable IPSEC and leave only GRE it starts working again

    Please advise if this configuration is possible? (IPSEC over GRE)

    The idea is to have OSPF routing, ospf works over GRE.
    But i want to encrypt traffic, so OSP does not work with IPSEC only

    Thats why i want to try IPSEC over GRE
    Last edited by boris.minakov; 08-09-2019 at 07:43 AM.

  2. #2
    Untangler jcoffin's Avatar
    Join Date
    Aug 2008
    Location
    Sunnyvale, CA
    Posts
    7,928

    Default

    Your network settings are incorrect.

    Remote network - Mikrotik_Internal_IP/<LAN Netmask>
    Local Network: UT_Internal_IP/<LAN Netmask>
    Attention: Support and help on the Untangle Forums is provided by
    volunteers and community members like yourself.
    If you need Untangle support please call or email support@untangle.com

  3. #3
    Untangler
    Join Date
    Feb 2013
    Posts
    83

    Default

    Dear Jcoffin, in mikrotik when you try to encrypt IPSEC over GRE, External ip addresses are used in local and remote network

    When you try to make only IPSEC (no GRE) than for site to site you should only point internal and remote networks

    But in IPSEC only routing protocol wont work, so i need IPSEC over GRE
    Please advise correct config

    Also IPSEC Phase 2 status is established, for both Mikrotik and UT
    But GRE addresses can not be pinged (from MK to UT and from UT to MIK)

    If i disable IPSEC, ping goes normally

    IPSEC and Routing
    https://community.cisco.com/t5/switc...s/td-p/2089573
    Last edited by boris.minakov; 08-09-2019 at 10:20 AM.

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •  

SEO by vBSEO 3.6.0 PL2