HOWTO setup IPSEC/GRE ?

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.

HOWTO setup IPSEC/GRE ?

This thread has been locked for further replies. You can start a new thread to share your ideas or ask questions.
HOWTO setup IPSEC/GRE ?
HOWTO setup IPSEC/GRE ?
2024-01-02 12:48:12
Tags: #VPN
Hardware Version: V2
Firmware Version: 2.0.1 Build 20230705 Rel.75930

Dear TP-link,

I would like to configure GRE tunnel over IPsec VPN connection. My IPsec connection is alreay running, but now I want to enable GRE tunnel.

Do you have documentation how to setup GRE tunnel over IPsec on ER605 / ER7206 routers?

Kind regards, wp-fred

  0      
  0      
#1
Options
6 Reply
Re:HOWTO setup IPSEC/GRE ?
2024-01-02 17:16:35 - last edited 2024-01-03 03:24:14

  @wp-fred 

 

I don't believe GRE is an option.  However, you can run L2TP over IPsec instead.

<< Paying it forward, one juicy problem at a time... >>
  1  
  1  
#2
Options
Re:HOWTO setup IPSEC/GRE ?
2024-01-03 02:10:50

Hi @wp-fred 

Thanks for posting in our business forum.

Three options for you to pick from.

L2TP over IPsec

IPsec.

Or GRE over IPsec.

I am not sure I understand what you ask for here.

Best Regards! If you are new to the forum, please read: Howto - A Guide to Use Forum Effectively. Read Before You Post. Look for a model? Search your model NOW Official and Beta firmware. NEW features! Subscribe for the latest update!Download Beta Here☚ ☛ ★ Configuration Guide ★ ☚ ☛ ★ Knowledge Base ★ ☚ ☛ ★ Troubleshooting ★ ☚ ● Be kind and nice. ● Stay on the topic. ● Post details. ● Search first. ● Please don't take it for granted. ● No email confidentiality should be violated. ● S/N, MAC, and your true public IP should be mosaiced.
  0  
  0  
#3
Options
Re:HOWTO setup IPSEC/GRE ?
2024-01-03 12:36:29 - last edited 2024-01-03 12:54:30

  @Clive_A 

Thank you for your answer.

I would like to run a VPN server (ER7206 or ER8411) and connect multiple sites based on ER605 via a LAN-to-LAN (transparent layer 2 connection) in order to support multicast (IGMP) protocol. In this setup Device-A and Device-B just gets IP-address from DHCP server over the layer 2 tunnel.

I was hoping firmware supports OpenVPN bridge-mode. But it seems OpenVPN Bridge mode is not supported yet. Are there any alternatives?

For a proof of concept I have bought ER7206 and two ER605 units. Since I have not much experience with TP-link equipment, do you have a HOWTO document?




 

  0  
  0  
#4
Options
Re:HOWTO setup IPSEC/GRE ?
2024-01-04 02:50:17

Hi @wp-fred 

Thanks for posting in our business forum.

wp-fred wrote

  @Clive_A 

Thank you for your answer.

I would like to run a VPN server (ER7206 or ER8411) and connect multiple sites based on ER605 via a LAN-to-LAN (transparent layer 2 connection) in order to support multicast (IGMP) protocol. In this setup Device-A and Device-B just gets IP-address from DHCP server over the layer 2 tunnel.

I was hoping firmware supports OpenVPN bridge-mode. But it seems OpenVPN Bridge mode is not supported yet. Are there any alternatives?

For a proof of concept I have bought ER7206 and two ER605 units. Since I have not much experience with TP-link equipment, do you have a HOWTO document?




 

Set up the IPsec then. S2S. You can find the guide on the official website. FAQ.

 

Best Regards! If you are new to the forum, please read: Howto - A Guide to Use Forum Effectively. Read Before You Post. Look for a model? Search your model NOW Official and Beta firmware. NEW features! Subscribe for the latest update!Download Beta Here☚ ☛ ★ Configuration Guide ★ ☚ ☛ ★ Knowledge Base ★ ☚ ☛ ★ Troubleshooting ★ ☚ ● Be kind and nice. ● Stay on the topic. ● Post details. ● Search first. ● Please don't take it for granted. ● No email confidentiality should be violated. ● S/N, MAC, and your true public IP should be mosaiced.
  0  
  0  
#5
Options
Re:HOWTO setup IPSEC/GRE ?
2024-01-04 06:50:40

  @Clive_A 

Thank you for your answer.

To my knowledge IPsec does not support layer 2 traffic. So Multicast traffic (IGMP) will not work over IPsec VPN connection.

Your help would be highly appreciated. 

  0  
  0  
#6
Options
Re:HOWTO setup IPSEC/GRE ?
2024-01-04 13:02:41

  @wp-fred 

 

^^ That is the reason the OP wants to run GRE over the IPSEC.

 

TPlink routers support an IGMP proxy for WAN ports, but I don't know if that extends to VPN endpoints.

<< Paying it forward, one juicy problem at a time... >>
  1  
  1  
#7
Options