Hi folks.. I'm trying to create an EoIP tunnel using DSL on one end, and Cable (Comcast) on the other. I can remotely get into each device from a 3rd connection, so I know they are both reachable.
My questions is, do I need to create another tunnel for this to sit inside? Because when I create the EoIP tunnel, at each end, and apply the correct addresses to it, it never seems to establish that I can tell.

My reason for choosing EoIP, is so I can have the same network segment out at the remote offices, as I do at the main office. The network is small enough, that I only have about 40 PC's on it, and don't wish to subnet it out any further.

Any help anyone can point me towards is greatly appreciated! I have been looking at this for about 3 or 4 days now, and just can't seem to see the hidden writing on the magical wall. I'm sure it's yet to come!

Most common problems:
* tunnel-id is not equal on both tunnel ends;
* gre is blocked in firewall
* ISP is blocking gre

once you establish eoip tunnel then try to add local route of your eoip, mine work fine without any issue

hope this help

Then do I just need to add it to the bridge, as I would a wireless interface or ether interface?


Thanks for the fast replies!!

ok. So I think I have it figured out, with the exception of the routing. What do I need to route where? and do I need to bridge the EoIP, LAN AND WAN connections together? Or just the EoIP and LAN?

Here is what I have so far...

Anything?? Anyone??

HELP!! PLEASE!!

What you're describing is exactly what the manual example setup shows.
http://wiki.mikrotik.com/wiki/Manual:In ... p_examples

Make tunnel interfaces on both ends with a matching ID and a termination point of the other side's public IP, bridge the LAN interfaces to the EoIP tunnel interface, and you're done.

Thanks Fewi for the response. I have been fighting over this, for about a week off and on now. Finally, right before I factory-default'd the units, I was doble checking everything (for the um-teenth time!!), and realized one end had an invalid gateway in it. Instead of having the ISP Gateay, I had put in 0.0.0.0/0 to BR1. OOPS!! That is how I set up all of the MT RB's inside my corporate network, and must have done this on autopilot again.

So now that it is established, I did a speedtest between the RB's. It's SLOW!! It is a 20MB pipe on one end (Comcast Internet), and 1.5 on the other (Qwest DSL). I am able to pass about 300k reliably. WTF?? Is this normal? Is there any way to improve this??


Thanks again for the help!!

How did you test the speed?

How much traffic is the interface showing? You're bridging - a bunch of bandwidth might be eaten up by broadcasts. You are probably far better off routing instead of bridging.

Your screenshot shows an RB750 - also remember that those are SOHO units with very little RAM and a fairly weak processor.

I did the speedtest just in the RB unit's themselves. I know it' better to do it from a PC or device after the link unit's. I also dod one from my laptop to the RB750 side, and it came back the same.
The in is showing about 2k at peaks, and about 200bps when virtually idle.
What is the solution to routing? PPTP? Some other tunneling or just route it thru the EoIP link?

Try from behind the units. There really is a very big difference between generating and terminating packets ands just having them flow through you.

If you were to switch to a routed model you could still go through EoIP tunnels. Which tunnel protocol you choose depends on your requirements for protecting the traffic. EoIP is wide open. PPTP is sort of secure. IPSec is secure. EoIP is easy, PPTP is a little harder, IPSec is a little harder still.

Awesome!! Thank you!!!!!!!!

I am going to swap out the RB750 unit with probably a RB433AH (Since that's what i have in stock), and see if it makes any difference. I think it will. I notice quite a difference in the 2. I was looking the the RB750 this monring with the tunnel established and VERY little traffic thru the tunnel, and it was at 100% several times, and mostly sat around 85%-90%. SOOOoooooo... I think it's the culprit.

I will look at the routed solution. It is going to be a bit to do, since I am doing this as a side project for this company. If they can live with it at this speed for a couple of weeks, I can order maybe an RB1100, and use it as the conectrator.

Thank again!! I really appreciate the help.