Unable to establish GRE tunnel between linux-based instance and Cisco Router Announcing the arrival of Valued Associate #679: Cesar Manara Planned maintenance scheduled April 17/18, 2019 at 00:00UTC (8:00pm US/Eastern) Come Celebrate our 10 Year Anniversary!Port foreword + openVPN + iptables?Centos 6.2 Fresh 'Basic Server' install networking issueswhy ping6 fails if tcpdump shows ICMP6 request/reply traffic?Static virtual IP in debian 6.0.4KVM/Libvirt bridged/routed networking not working on newer guest kernelsVirtual interface gets static IP, actual interface doesn't?KVM Network configuration + VLAN truncktcpdump on bridge interface (virbr) does not receive any packets destined for one of its addressesStatic Public IP Address on Amazon EC2VRRP: Linux is sending ARP requests / replies on real interfaces instead of virtual interface
In predicate logic, does existential quantification (∃) include universal quantification (∀), i.e. can 'some' imply 'all'?
What is the meaning of the new sigil in Game of Thrones Season 8 intro?
What's the meaning of 間時肆拾貳 at a car parking sign
At the end of Thor: Ragnarok why don't the Asgardians turn and head for the Bifrost as per their original plan?
How does the particle を relate to the verb 行く in the structure「A を + B に行く」?
Why didn't this character "real die" when they blew their stack out in Altered Carbon?
If a contract sometimes uses the wrong name, is it still valid?
Why light coming from distant stars is not discreet?
Is the Standard Deduction better than Itemized when both are the same amount?
How does debian/ubuntu knows a package has a updated version
Why did the rest of the Eastern Bloc not invade Yugoslavia?
Should I use a zero-interest credit card for a large one-time purchase?
When a candle burns, why does the top of wick glow if bottom of flame is hottest?
Can I cast Passwall to drop an enemy into a 20-foot pit?
Withdrew £2800, but only £2000 shows as withdrawn on online banking; what are my obligations?
Is it fair for a professor to grade us on the possession of past papers?
String `!23` is replaced with `docker` in command line
Using audio cues to encourage good posture
Book where humans were engineered with genes from animal species to survive hostile planets
English words in a non-english sci-fi novel
Why do we bend a book to keep it straight?
Why am I getting the error "non-boolean type specified in a context where a condition is expected" for this request?
What is a non-alternating simple group with big order, but relatively few conjugacy classes?
Why did the Falcon Heavy center core fall off the ASDS OCISLY barge?
Unable to establish GRE tunnel between linux-based instance and Cisco Router
Announcing the arrival of Valued Associate #679: Cesar Manara
Planned maintenance scheduled April 17/18, 2019 at 00:00UTC (8:00pm US/Eastern)
Come Celebrate our 10 Year Anniversary!Port foreword + openVPN + iptables?Centos 6.2 Fresh 'Basic Server' install networking issueswhy ping6 fails if tcpdump shows ICMP6 request/reply traffic?Static virtual IP in debian 6.0.4KVM/Libvirt bridged/routed networking not working on newer guest kernelsVirtual interface gets static IP, actual interface doesn't?KVM Network configuration + VLAN truncktcpdump on bridge interface (virbr) does not receive any packets destined for one of its addressesStatic Public IP Address on Amazon EC2VRRP: Linux is sending ARP requests / replies on real interfaces instead of virtual interface
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty height:90px;width:728px;box-sizing:border-box;
I would like to establish a GRE Tunnel connection between a Cisco CSR1000v and an EC2 instance that runs Ubuntu 18.04.02 LTS Linux 4.15.
In R1 CSR1000v the configuration is the following:
interface Tunnel99
ip address 10.10.10.2 255.255.255.0
keepalive 2 3
tunnel mode gre ip
tunnel source GigabitEthernet1
tunnel destination 54.148.34.17
tunnel path-mtu-discovery
end
The Tunnel interface description is the following
Interface IP-Address OK? Method Status Protocol
GigabitEthernet1 172.1.1.7 YES DHCP up up
Tunnel99 10.10.10.2 YES manual up down
In the EC2 instance, I got the following configuration
modprobe ip_gre
lsmod | grep gr
sudo ip tunnel add gre0 mode gre remote 35.163.97.129 local 172.2.2.11 ttl 255
sudo ip link set gre0 up
ip addr add 10.10.10.1/24 dev gre0
The problem is I couldn't ping the tunnel's interface from both sides. And the GRE0 interface shows a destination address as same as the tunnel's IP address.
gre0: flags=209<UP,POINTOPOINT,RUNNING,NOARP> mtu 8977
inet 10.10.10.1 netmask 255.255.255.0 destination 10.10.10.1
inet6 fe80::200:5efe:ac00:106 prefixlen 64 scopeid 0x20<link>
unspec AC-00-01-06-00-00-00-00-00-00-00-00-00-00-00-00 txqueuelen 1000 (UNSPEC)
RX packets 171 bytes 4104 (4.1 KB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 7 bytes 392 (392.0 B)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
networking amazon-web-services amazon-ec2 cisco linux-networking
asked Apr 11 at 12:46
Khalil MebarkiaKhalil Mebarkia
658
add a comment |
I would like to establish a GRE Tunnel connection between a Cisco CSR1000v and an EC2 instance that runs Ubuntu 18.04.02 LTS Linux 4.15.
In R1 CSR1000v the configuration is the following:
interface Tunnel99
ip address 10.10.10.2 255.255.255.0
keepalive 2 3
tunnel mode gre ip
tunnel source GigabitEthernet1
tunnel destination 54.148.34.17
tunnel path-mtu-discovery
end
The Tunnel interface description is the following
Interface IP-Address OK? Method Status Protocol
GigabitEthernet1 172.1.1.7 YES DHCP up up
Tunnel99 10.10.10.2 YES manual up down
In the EC2 instance, I got the following configuration
modprobe ip_gre
lsmod | grep gr
sudo ip tunnel add gre0 mode gre remote 35.163.97.129 local 172.2.2.11 ttl 255
sudo ip link set gre0 up
ip addr add 10.10.10.1/24 dev gre0
The problem is I couldn't ping the tunnel's interface from both sides. And the GRE0 interface shows a destination address as same as the tunnel's IP address.
gre0: flags=209<UP,POINTOPOINT,RUNNING,NOARP> mtu 8977
inet 10.10.10.1 netmask 255.255.255.0 destination 10.10.10.1
inet6 fe80::200:5efe:ac00:106 prefixlen 64 scopeid 0x20<link>
unspec AC-00-01-06-00-00-00-00-00-00-00-00-00-00-00-00 txqueuelen 1000 (UNSPEC)
RX packets 171 bytes 4104 (4.1 KB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 7 bytes 392 (392.0 B)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
networking amazon-web-services amazon-ec2 cisco linux-networking
asked Apr 11 at 12:46
Khalil MebarkiaKhalil Mebarkia
658
ip addr show dev gre0? Also you might want to settunnel source [egress-ifc-private-ip]on the CSR.
– Michael - sqlbot
Apr 11 at 14:43
@Michael-sqlbot I don't get the part of settingtunnel source [egress-ifc-private-ip]
– Khalil Mebarkia
Apr 12 at 9:50
Disregard that comment, you already settunnel sourceas the interface and I somehow overlooked that when I made the suggestion.
– Michael - sqlbot
Apr 12 at 13:55
@Michael-sqlbot The problem is the tunnel protocol is down in theCSR. Therefore pining the tunnel address10.10.10.2is unsuccessful and the other side is of course unreachable. However, fromLinux instancepinging the tunnel address10.10.10.1is successful
– Khalil Mebarkia
Apr 12 at 14:04
add a comment |
I would like to establish a GRE Tunnel connection between a Cisco CSR1000v and an EC2 instance that runs Ubuntu 18.04.02 LTS Linux 4.15.
In R1 CSR1000v the configuration is the following:
interface Tunnel99
ip address 10.10.10.2 255.255.255.0
keepalive 2 3
tunnel mode gre ip
tunnel source GigabitEthernet1
tunnel destination 54.148.34.17
tunnel path-mtu-discovery
end
The Tunnel interface description is the following
Interface IP-Address OK? Method Status Protocol
GigabitEthernet1 172.1.1.7 YES DHCP up up
Tunnel99 10.10.10.2 YES manual up down
In the EC2 instance, I got the following configuration
modprobe ip_gre
lsmod | grep gr
sudo ip tunnel add gre0 mode gre remote 35.163.97.129 local 172.2.2.11 ttl 255
sudo ip link set gre0 up
ip addr add 10.10.10.1/24 dev gre0
The problem is I couldn't ping the tunnel's interface from both sides. And the GRE0 interface shows a destination address as same as the tunnel's IP address.
gre0: flags=209<UP,POINTOPOINT,RUNNING,NOARP> mtu 8977
inet 10.10.10.1 netmask 255.255.255.0 destination 10.10.10.1
inet6 fe80::200:5efe:ac00:106 prefixlen 64 scopeid 0x20<link>
unspec AC-00-01-06-00-00-00-00-00-00-00-00-00-00-00-00 txqueuelen 1000 (UNSPEC)
RX packets 171 bytes 4104 (4.1 KB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 7 bytes 392 (392.0 B)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
networking amazon-web-services amazon-ec2 cisco linux-networking
asked Apr 11 at 12:46
Khalil MebarkiaKhalil Mebarkia
658
I would like to establish a GRE Tunnel connection between a Cisco CSR1000v and an EC2 instance that runs Ubuntu 18.04.02 LTS Linux 4.15.
In R1 CSR1000v the configuration is the following:
interface Tunnel99
ip address 10.10.10.2 255.255.255.0
keepalive 2 3
tunnel mode gre ip
tunnel source GigabitEthernet1
tunnel destination 54.148.34.17
tunnel path-mtu-discovery
end
The Tunnel interface description is the following
Interface IP-Address OK? Method Status Protocol
GigabitEthernet1 172.1.1.7 YES DHCP up up
Tunnel99 10.10.10.2 YES manual up down
In the EC2 instance, I got the following configuration
modprobe ip_gre
lsmod | grep gr
sudo ip tunnel add gre0 mode gre remote 35.163.97.129 local 172.2.2.11 ttl 255
sudo ip link set gre0 up
ip addr add 10.10.10.1/24 dev gre0
The problem is I couldn't ping the tunnel's interface from both sides. And the GRE0 interface shows a destination address as same as the tunnel's IP address.
gre0: flags=209<UP,POINTOPOINT,RUNNING,NOARP> mtu 8977
inet 10.10.10.1 netmask 255.255.255.0 destination 10.10.10.1
inet6 fe80::200:5efe:ac00:106 prefixlen 64 scopeid 0x20<link>
unspec AC-00-01-06-00-00-00-00-00-00-00-00-00-00-00-00 txqueuelen 1000 (UNSPEC)
RX packets 171 bytes 4104 (4.1 KB)
RX errors 0 dropped 0 overruns 0 frame 0
TX packets 7 bytes 392 (392.0 B)
TX errors 0 dropped 0 overruns 0 carrier 0 collisions 0
networking amazon-web-services amazon-ec2 cisco linux-networking
networking amazon-web-services amazon-ec2 cisco linux-networking
asked Apr 11 at 12:46
Khalil MebarkiaKhalil Mebarkia
658
asked Apr 11 at 12:46
Khalil MebarkiaKhalil Mebarkia
658
edited Apr 12 at 14:02
Khalil Mebarkia
asked Apr 11 at 12:46
Khalil MebarkiaKhalil Mebarkia
658
asked Apr 11 at 12:46
Khalil MebarkiaKhalil Mebarkia
658
asked Apr 11 at 12:46
Khalil MebarkiaKhalil Mebarkia
658
658
ip addr show dev gre0? Also you might want to settunnel source [egress-ifc-private-ip]on the CSR.
– Michael - sqlbot
Apr 11 at 14:43
@Michael-sqlbot I don't get the part of settingtunnel source [egress-ifc-private-ip]
– Khalil Mebarkia
Apr 12 at 9:50
Disregard that comment, you already settunnel sourceas the interface and I somehow overlooked that when I made the suggestion.
– Michael - sqlbot
Apr 12 at 13:55
@Michael-sqlbot The problem is the tunnel protocol is down in theCSR. Therefore pining the tunnel address10.10.10.2is unsuccessful and the other side is of course unreachable. However, fromLinux instancepinging the tunnel address10.10.10.1is successful
– Khalil Mebarkia
Apr 12 at 14:04
add a comment |
ip addr show dev gre0? Also you might want to settunnel source [egress-ifc-private-ip]on the CSR.
– Michael - sqlbot
Apr 11 at 14:43
@Michael-sqlbot I don't get the part of settingtunnel source [egress-ifc-private-ip]
– Khalil Mebarkia
Apr 12 at 9:50
Disregard that comment, you already settunnel sourceas the interface and I somehow overlooked that when I made the suggestion.
– Michael - sqlbot
Apr 12 at 13:55
@Michael-sqlbot The problem is the tunnel protocol is down in theCSR. Therefore pining the tunnel address10.10.10.2is unsuccessful and the other side is of course unreachable. However, fromLinux instancepinging the tunnel address10.10.10.1is successful
– Khalil Mebarkia
Apr 12 at 14:04
ip addr show dev gre0? Also you might want to set tunnel source [egress-ifc-private-ip] on the CSR.– Michael - sqlbot
Apr 11 at 14:43
ip addr show dev gre0? Also you might want to set tunnel source [egress-ifc-private-ip] on the CSR.– Michael - sqlbot
Apr 11 at 14:43
@Michael-sqlbot I don't get the part of setting
tunnel source [egress-ifc-private-ip]– Khalil Mebarkia
Apr 12 at 9:50
@Michael-sqlbot I don't get the part of setting
tunnel source [egress-ifc-private-ip]– Khalil Mebarkia
Apr 12 at 9:50
Disregard that comment, you already set
tunnel source as the interface and I somehow overlooked that when I made the suggestion.– Michael - sqlbot
Apr 12 at 13:55
Disregard that comment, you already set
tunnel source as the interface and I somehow overlooked that when I made the suggestion.– Michael - sqlbot
Apr 12 at 13:55
@Michael-sqlbot The problem is the tunnel protocol is down in the
CSR. Therefore pining the tunnel address 10.10.10.2 is unsuccessful and the other side is of course unreachable. However, from Linux instance pinging the tunnel address 10.10.10.1 is successful– Khalil Mebarkia
Apr 12 at 14:04
@Michael-sqlbot The problem is the tunnel protocol is down in the
CSR. Therefore pining the tunnel address 10.10.10.2 is unsuccessful and the other side is of course unreachable. However, from Linux instance pinging the tunnel address 10.10.10.1 is successful– Khalil Mebarkia
Apr 12 at 14:04
add a comment |
0
active
oldest
votes
Your Answer
StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "2"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);
else
createEditor();
);
function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader:
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
,
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);
);
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f962603%2funable-to-establish-gre-tunnel-between-linux-based-instance-and-cisco-router%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
0
active
oldest
votes
0
active
oldest
votes
active
oldest
votes
active
oldest
votes
Thanks for contributing an answer to Server Fault!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fserverfault.com%2fquestions%2f962603%2funable-to-establish-gre-tunnel-between-linux-based-instance-and-cisco-router%23new-answer', 'question_page');
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function ()
StackExchange.helpers.onClickDraftSave('#login-link');
);
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
ip addr show dev gre0? Also you might want to settunnel source [egress-ifc-private-ip]on the CSR.– Michael - sqlbot
Apr 11 at 14:43
@Michael-sqlbot I don't get the part of setting
tunnel source [egress-ifc-private-ip]– Khalil Mebarkia
Apr 12 at 9:50
Disregard that comment, you already set
tunnel sourceas the interface and I somehow overlooked that when I made the suggestion.– Michael - sqlbot
Apr 12 at 13:55
@Michael-sqlbot The problem is the tunnel protocol is down in the
CSR. Therefore pining the tunnel address10.10.10.2is unsuccessful and the other side is of course unreachable. However, fromLinux instancepinging the tunnel address10.10.10.1is successful– Khalil Mebarkia
Apr 12 at 14:04