Please give your assessment of what is better to choose for a tunnel between two routers to combine two subnets.
IPIP vs GRE - what's the difference?
Re: IPIP vs GRE [SOLVED]
From wiki: "GRE is the same as IPIP and EoIP which were originally developed as stateless tunnels. Which means that if the remote end of the tunnel goes down, all traffic that was routed over the tunnels will gets blackholed. To solve this problem, RouterOS have added 'keepalive' feature for GRE tunnels."
https://help.mikrotik.com/docs/display/ROS/IPIP
https://help.mikrotik.com/docs/display/ROS/GRE
https://help.mikrotik.com/docs/display/ROS/EoIP
Without much knowledge I would say IPIP and GRE are for connecting routers at different sites and EOIP is more for connecting LANS from different sites.
https://help.mikrotik.com/docs/display/ROS/IPIP
https://help.mikrotik.com/docs/display/ROS/GRE
https://help.mikrotik.com/docs/display/ROS/EoIP
Without much knowledge I would say IPIP and GRE are for connecting routers at different sites and EOIP is more for connecting LANS from different sites.
Re: IPIP vs GRE
In what cases do I need to specify addresses for both ends of the IPIP-tunnel, and in what cases it is not necessary?
I tried a IPIP-tunnel without addresses - everything works fine.
I tried a IPIP-tunnel without addresses - everything works fine.
Re: IPIP vs GRE
Not required for single ISP or single WAN IP. If you have multi-ISP uplink or more IPs on WAN and you want to use specific one (not default), then you need to specifyIn what cases do I need to specify addresses for both ends of the IPIP-tunnel, and in what cases it is not necessary?
I tried a IPIP-tunnel without addresses - everything works fine.
Code: Select all
local-addressCode: Select all
local-address-
-
CZFan
Forum Guru
- Posts: 2098
- Joined:
- Location: South Africa, Krugersdorp (Home town of Brad Binder)
- Contact:
Re: IPIP vs GRE
When you enable IPsec encryption you will need to specify a local addressIn what cases do I need to specify addresses for both ends of the IPIP-tunnel, and in what cases it is not necessary?
I tried a IPIP-tunnel without addresses - everything works fine.
Re: IPIP vs GRE
I just tried ... and IPsec works just fine without setting local address. Seems it automatically takes local IP address of interface used when routing towards peer. For most users that'll be interface used by default route.When you enable IPsec encryption you will need to specify a local addressIn what cases do I need to specify addresses for both ends of the IPIP-tunnel, and in what cases it is not necessary?
I tried a IPIP-tunnel without addresses - everything works fine.
-
-
CZFan
Forum Guru
- Posts: 2098
- Joined:
- Location: South Africa, Krugersdorp (Home town of Brad Binder)
- Contact:
Re: IPIP vs GRE
Hmmm, Yup, just tested and seems you are correct....
I just tried ... and IPsec works just fine without setting local address. Seems it automatically takes local IP address of interface used when routing towards peer. For most users that'll be interface used by default route.
I guarantee this was not the case a couple of versions ago...
Re: IPIP vs GRE
I'll take your word on it ;-)I guarantee this was not the case a couple of versions ago...
Who is online
Users browsing this forum: No registered users and 19 guests