[192101] in North American Network Operators' Group
Re: Linux router guru sought for hairpulling issue
daemon@ATHENA.MIT.EDU (Eric Germann)
Wed Oct 19 11:38:15 2016
X-Original-To: nanog@nanog.org
From: Eric Germann <ekgermann@semperen.com>
Date: Wed, 19 Oct 2016 10:38:04 -0500
In-Reply-To: <2011346D-EA12-4C06-80C0-626A487B71B3@semperen.com>
To: nanog list <nanog@nanog.org>
X-Assp-Envelope-From: ekgermann@semperen.com
Errors-To: nanog-bounces@nanog.org
--Apple-Mail=_78077EC7-E969-400D-AD80-C4A3C42699C9
Content-Transfer-Encoding: quoted-printable
Content-Type: text/plain;
charset=utf-8
Thanks to Robert McKay for the answer that fixed it.
His explanation was
> Did you forget to add ttl 255 (or similar) to the tunnel setup? By =
default the gre packets will end up with the ttl set to the same as the =
inside payload ttl so when you traceroute they won't reach the other =
gateway.. that sounds like what you might be talking about?
>=20
> http://lartc.org/howto/lartc.tunnel.gre.html =
<http://lartc.org/howto/lartc.tunnel.gre.html>
Added TTL=3D255 to the ifcfg-tun* config files and all is well.
Thanks to the others for their ideas (too many to name).
Great community
EKG
> On Oct 19, 2016, at 8:27 AM, Eric Germann <ekgermann@semperen.com> =
wrote:
>=20
> Colleagues,
>=20
> I know we=E2=80=99re all usually running big gear, but I=E2=80=99ve =
been tasked with building some appliances to run in the cloud as VM=E2=80=99=
s.
>=20
> Looking for someone who has built on Centos 7 using IPSec and GRE =
tunnels. Having an issue with GRE tunnels and trace route. That=E2=80=99s=
pulling my hair out.
>=20
> If you=E2=80=99d like to discuss, reply off list.
>=20
> Thanks
>=20
> EKG
>=20
--Apple-Mail=_78077EC7-E969-400D-AD80-C4A3C42699C9
Content-Disposition: attachment;
filename=smime.p7s
Content-Type: application/pkcs7-signature;
name=smime.p7s
Content-Transfer-Encoding: base64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--Apple-Mail=_78077EC7-E969-400D-AD80-C4A3C42699C9--
