Re: Error trying to create gre tunnel

[Andy Ruhl <acruhl%gmail.com@localhost>]

On Fri, Aug 11, 2017 at 3:53 PM, D'Arcy Cain <darcy%netbsd.org@localhost> wrote:
> On 08/11/2017 12:37 PM, D'Arcy Cain wrote:
> It turns out that I misunderstood the example.  Both servers need to be on
> the public Internet.  In my case only the remote was.
>
> Is there some way to do this?  I can port forward but I suspect that that
> won't work as it doesn't use TCP or UDP over the tunnel.  I looked at
> OpenVPN but that only allows individual hosts to connect.  I am trying to
> join two internal networks.
>
> I can get a second IP address for my system but I need something that works
> for other clients who may not have that option.

I suppose you could try forwarding all GRE (ip protocol 47) inward to
wherever the GRE tunnel lives inside the network. Have you tried that?

I haven't tried doing this, I can't tell you how it would work. It's
normally best to do these tunnels at the internet facing router, and
then set up routes so that your internal clients can reach the other
side.

L2TP seems to not care about NAT. Never tried it with NetBSD though.

Andy