On Thu, 16 May 2002, Vikas B. Wadhwani wrote: > This question adds on to the GRE tunnel query that I > asked earlier. > > For the GRE tunnel to work, do I need to configure > tunnels in both directions. You need to configure the tunnel on both endpoints, as both endpoints have to cooperate to provide the tunnel. So, if you have machine A with IP address 172.16.8.1 and machine B with IP address 172.16.16.1 then you would for example use ip tunnel add abtun mode gre remote 172.16.16.1 local 172.16.8.1 ip addr add 192.168.0.1 peer 192.168.0.2 dev abtun ip link set abtun up on machine A and ip tunnel add abtun mode gre remote 172.16.8.1 local 172.16.16.1 ip addr add 192.168.0.2 peer 192.168.0.1 dev abtun ip link set abtun up on machine B to get the tunnel up and running. Then you should be able to ping the endpoints on the other side, if the GRE encapsulated packets are not being firewalled somewhere along the way. Note that routing is at another level in the protocol stack. Doei, Arthur. -- /\ / | arthurvl@xxxxxxxxxx | Work like you don't need the money /__\ / | A friend is someone with whom | Love like you have never been hurt / \/__ | you can dare to be yourself | Dance like there's nobody watching
