Re: Error trying to create gre tunnel

[Valery Ushakov <uwe%stderr.spb.ru@localhost>]

On Sat, Aug 12, 2017 at 08:48:24 -0400, D'Arcy Cain wrote:

> On 08/12/2017 12:16 AM, Valery Ushakov wrote:
> > You can forward all trafic from the consumer gizmo internet facing
> > router (with single public IP address from the provider) to the
> > internal netbsd router.  It's usually called "DMZ host" in the web
> > interface.
> 
> I considered that but it seems insecure.  I do have a few ports pointing to
> the device already though so that would just open all of them.  I suppose it
> would be no worse than using the NetBSD box as my gateway router.

Yes, the netbsd router is effectively the gateway router.


> > PS: Hmm, looking at gre(4), shouldn't the example be fixed to say
> > 
> >    ifconfig greN tunnel B C
> 
> I don't think so.  I am pretty sure that I read that the first argument to
> tunnel must be an address on the host server.  Not sure where I read that
> though as I have been doing a lot of research in the last day or two.  I
> couldn't find it in the man page.

Two points here: 1) the example I gave is adapted from the actual
working configuration I use; 2) in the man page example address C is
not mentioned at all in the configuration of "Router A".  How can
router A divine it, as it obviously needs to send the GRE packets to
the address C (remote-outer-ip).

-uwe