gre tunnel explained

Most Relevant Content

  • MikroTik Site to Site GRE Tunnel Configuration with IPsec

    VPN (Virtual Private Network) is a technology that provides a secure tunnel across a public network. A private network user can send and receive data to any remote private network using VPN Tunnel as if his/her network device was directly connected to that private network. MikroTik provides GRE (Generic Routing Encapsulation) tunnel that is used to create a site to site VPN tunnel. GRE tunneling protocol which can encapsulate a wide variety of protocols creating a virtual point-to-point link was originally developed by Cisco. GRE is a stateless tunnel like EoIP and IPIP. That means if the remote end of the tunnel goes down, all traffic that was routed over the tunnels will get blackholed. To solve this problem, RouterOS have added ‘keepalive’ feature for GRE tunnels. By default keepalive is set to 10 seconds and 10 retries. GRE adds an outer header mentioning the entry point of the tunnel (SourceIP) and the exit point of the tunnel (DestinationIP) but the inner packet is kept unmodified. GRE tunnel only encapsulates IP packets but does not provide authentication and encryption. GRE tunnel with IPsec ensures IP packet encapsulation as well as authentication and encryption. IPsec usage makes your packets secure but [...]

    READ MORE »

  • You May Also Like

  • »

    Mikrotik Router Basic Configuration Using Winbox |   August 24, 2015

    MikroTik is one of the most popular routers. MikroTik Router has a lot of networking services that help to build a stable and smooth network so easily. It is said that any ISP Company or any Enterprise Office cannot go a single day without MikroTik Router. So, system administrators who are not using MikroTik Router yet, they will soon start using MikroTik Router, I think. As a system administrator, I am also using MikroTik Router about 5 years in my network [...]

    READ MORE »

  • »

    User Management in Linux (Red Hat/CentOS) |   September 28, 2017

    User management is an important part of Linux (especially Red Hat Enterprise Linux) system administration. Linux users can be administrated using user or group administration GUI (Graphical User Interface) tool as well as through Red Hat/CentOS Linux command prompt. But I will always suggest you to do command line user administration as much as possible because in production GUI will not be provided always. Many people who are learning Linux administration do not know all features of user administration command [...]

    READ MORE »

  • »

    Free Internet Speed Test Online |   August 31, 2015

    You are here because you want to check your broadband internet speed. Don’t worry, I will show you how to check your internet speed from online absolutely free and fastest way. I will show you top 4 websites link from which your broadband internet speed can be checked so easily. I will also show you how to check bandwidth usage continuously with windows operating system’s utility and a third party software utility. So, keep reading this article and find how [...]

    READ MORE »

  • »

    How to Add New Domains to BIND DNS Server |   July 5, 2019

    DNS (Domain Name System) Server is an essential part to any computer network. So, it is always suggest keeping a DNS Server in every network. How to configure a DNS Server with BIND package was discussed in my previous article. A common question among the fresher admins of BIND DNS is how to add a new domain to BIND DNS Server. For this, this article is designed to discuss the proper way to add multiple domains to BIND DNS Server. [...]

    READ MORE »

  • »

    MikroTik Hotspot HTTPS Redirect with Free SSL Certificate |   June 21, 2020

    SSL Certificate is required to enable HTTPS Login and HTTPS Redirect in MikroTik Hotspot. In one of my last articles I discussed how to configure MikroTik Hotspot HTTPS redirect and HTTPS login with MikroTik self-signed certificate. But self-signed certificate is not trusted by operating system. So, we get the following two issues if we configure HTTPS Login and HTTPS Redirect with self-signed certificate. Ask to proceed unsafe site: As browsers cannot trust self-signed certificate, it shows a warning message and [...]

    READ MORE »

  • »

    MikroTik Port Forwarding using Winbox |   July 23, 2018

    MikroTik Port Forwarding or Port Mapping is a NAT application that is used to redirect a request from MikroTik IP address and port number combination to a local IP address and port number. For example, if you have a Web Server or FTP Server in your private/local area and want to access this local server from outside of your local area (from internet/public), you can apply MikroTik port forwarding or port mapping and can easily access your Web Server or [...]

    READ MORE »

  • »

    Computer Network Topology Outline |   September 12, 2017

    The first thing that has to study about a network is its physical shape or design layout. It will be extremely important when a wiring scheme and design are selected for a new network installation. Actually Network Topology refers to physical shape or design layout of a network. Network topology determines how different nodes in a network are connected and how these nodes communicate to each other. Types of Computer Network Topology Network really has two shapes or two types [...]

    READ MORE »

  • »

    MikroTik DHCP Server Configuration in RouterOS 7 |   October 14, 2015

    Dynamic Host Configuration Protocol (DHCP) is a client/server protocol. DHCP server automatically provides an Internet Protocol (IP) address and other related information such as subnet mask, default gateway and DNS to DHCP clients. DHCP server and client use UDP port 67 and 68 for communication. In a network, a DHCP client (IP devices such as Desktop, Laptop, Smartphone etc.) requests for an IP lease to DHCP servers and a DHCP server responses allocating IP address and other related IP information [...]

    READ MORE »

  • »

    How to Install Extra Packages in MikroTik RouterOS |   October 10, 2019

    MikroTik RouterOS does not always include all the packages those are developed by MikroTik team. So, sometimes you may find that some packages are missing in your RouterOS such as NTP package, DUDE package, Wireless package, CAPsMAN package and so on. Specially, user manager package which is totally a separate MikroTik RADIUS package used to manage user authentication, authorization and accounting is always missing. Also upgrading RouterOS or downgrading RouterOS you may find that some packages are missing there. So, [...]

    READ MORE »