Howto route Subnet via GRE-Tunnel to Debian Endpoint


#1

Hey,

I’m searching for some help. The scenario:

Datacenter A: VYOS Host
Datacenter B: Debian 7.x Host

Both Hosts are connected successfully with GRE-Tunnel:

tunnel tun0 {
address 192.168.10.1/30
description “GRE Tunnel”
encapsulation gre
local-ip 185.a.a.a
multicast enable
remote-ip 84.b.b.b
}

I can ping on each side 192.168.10.1 <=> 192.168.10.2 - Working!

Next Step: /27 Subnet (Internet IP-Block, no internal) in DC A I’d like to ‘tunnel’ to Datacenter B Host. The Subnet: 72.16.1.0/27

I add on Vyos:

vyos@gre-router# show protocols static
route 72.16.1.0/27 {
next-hop 192.168.10.2 {
}
}

And on Debian Host:
ip route add 72.16.1.0/27 via 192.168.10.1 dev greW0

When I know add a single IP on Debian Host, like:
ip addr add 72.16.1.2/27 dev greW0

I can ping ->only<- from VYOS HOST 72.16.1.2 but it’s not external available. When I make ping from Debian Host to Gateway, I get loop:

root@host1:~# ping 72.16.1.1
PING 72.16.1.1 (72.16.1.1 56(84) bytes of data.
From 192.168.10.1: icmp_seq=1 Redirect Host(New nexthop: 192.168.10.2)
From 192.168.10.1: icmp_seq=2 Redirect Host(New nexthop: 192.168.10.2)
From 192.168.10.1: icmp_seq=3 Redirect Host(New nexthop: 192.168.10.2)

So it’s like a loop.

Need help :frowning: Please


#2

your network mask /27 is same …


#3

That means? Yes I have a /27 I’d like to send to Debian Host.


#4

why do you need this route on Debian Host B “ip route add 72.16.1.0/27 via 192.168.10.1 dev greW0” ?