everything works through gre at the beginning of the ipsec, then gre and then ospf, it was possible to do without this change, but only ospf would not work, everything else worked
Everything worked out, it started on my scheme of work, in the IPsec policy I put 47 in place 255, everything worked, and from 7 to 7 version of Ros and from 6 to 7 RoS, everything now works at any MTU value if it is set at both ends.
thanks wiseroute I set the value of MTU 1476, but the result is negative. I also chose the broadcast for the gre interface. It seems to me that the problem is not in the mtu values and the ospf settings, but in the firewall itself. If it's not difficult, can you export your settings to gre, ospf a...
Yes, I turned it off so that errors were not written to the device log. The settings should have been done already from hopelessness, I tried different variations I post the modified version, but the result is negative
Hello mducharme I added rules on both routers add action=accept chain=input in-interface=gre-justhost log-prefix=fi-ospf protocol=ospf src-address=172.16.0.0/12. I tried to disable all rules in all chains, but the result is negative
Thanks for the answer I registered metrics for routes for both routers, pings fly and traffic too. I left the MTU value of 1350, the tunnel stops working above. I set the fragmentation and the MTU value to 1500, the tunnel works, but the OSPF does not want to turn on. In vain, apparently, I bought d...
MTU的价值观,我改变了他们desperation It defaults to 1350. I set up the fire wall rule right away, turned on logging and noticed one peculiarity, for some reason traffic goes through the external interface, although it should not go there, it should go inside the protocol gre f...
起初,我组up the IP sec, after that I already start the GRE tunnel with addresses that I don’t use inside the network. After that, I already run ospf. I did your recommendations but nothing helps, it does not work even with version 7 on both routers. Created a new clean install between...
Hi all I have several routers, RB4011 and Hap AC3, with a GRE tunnel built between them. In my configuration, the OSPF protocol does not work with ROS V6 and ROS V7, and this configuration does not work when I have ROS V7 and ROS V7. But this configuration works absolutely fine between ROS V6 and RO...
Thank you for not breaking the IKE 2. On the stable version, dynamic connections with LTE, without real IP addresses disappear, I don't know how to solve.