User:Clandmeter - Revision history

Clandmeter at 11:20, 11 June 2016

2016-06-11T11:20:40Z

← Older revision		Revision as of 11:20, 11 June 2016
Line 1:		Line 1:
	[[Setup patchwork on ~~alpine linux~~]]		[[Setup patchwork on Alpine Linux]]

	[[Setup of DMVPN on Alpine linux]]		[[Setup of DMVPN on Alpine linux]]

Clandmeter at 11:20, 11 June 2016

2016-06-11T11:20:12Z

← Older revision		Revision as of 11:20, 11 June 2016
Line 1:		Line 1:
			[[Setup patchwork on alpine linux]]

	[[Setup of DMVPN on Alpine linux]]		[[Setup of DMVPN on Alpine linux]]

Clandmeter at 12:36, 30 October 2015

2015-10-30T12:36:48Z

← Older revision		Revision as of 12:36, 30 October 2015
Line 1:		Line 1:
			[[Setup of DMVPN on Alpine linux]]

	We start by adding mGRE tunnels to our network configuration. In conjunction with IPsec VPNs this allows passing of routing information between connected networks.		We start by adding mGRE tunnels to our network configuration. In conjunction with IPsec VPNs this allows passing of routing information between connected networks.

Clandmeter at 22:36, 28 October 2015

2015-10-28T22:36:08Z

← Older revision		Revision as of 22:36, 28 October 2015
Line 14:		Line 14:
	thisshouldbetheipsecconfig		thisshouldbetheipsecconfig

	To ~~control both~~ the ~~GRE tunnels and IPSec,~~ we use Quagga new NHRP plugin developed by Timo Terras (fabled).		To talk to the vici interface we use Quagga's new NHRP plugin developed by Timo Terras (fabled).
	We have to use his modified version, as these changes have not yet been upstreamed.		We have to use his modified version, as these changes have not yet been upstreamed.

	NHRP will automatically create tunnels ~~and~~ IPsec ~~tunnels~~, and we will use BGP to router the traffic over it.		NHRP will automatically create GRE tunnels over IPsec, and we will use BGP to router the traffic over it.

Clandmeter at 22:34, 28 October 2015

2015-10-28T22:34:05Z

← Older revision		Revision as of 22:34, 28 October 2015
Line 7:		Line 7:
	netmask 255.255.255.255		netmask 255.255.255.255
	post-down ip tunnel del $IFACE \|\| true		post-down ip tunnel del $IFACE \|\| true

			To encrypt the traffic going over this tunnel, we will use ipsec. for ipsec we will use strongswan which has the vici plugin, see:
			The vici plugin provides VICI, the Versatile IKE Configuration Interface. As its name indicates, it provides an interface for external applications to not only configure, but also to control and monitor the IKE daemon charon.
			for this we also need a modified version of strongswan, provided by fabled.

			thisshouldbetheipsecconfig

			To control both the GRE tunnels and IPSec, we use Quagga new NHRP plugin developed by Timo Terras (fabled).
			We have to use his modified version, as these changes have not yet been upstreamed.

			NHRP will automatically create tunnels and IPsec tunnels, and we will use BGP to router the traffic over it.


	The vici plugin provides VICI, the Versatile IKE Configuration Interface. As its name indicates, it provides an interface for external applications to not only configure, but also to control and monitor the IKE daemon charon.

Clandmeter at 22:22, 28 October 2015

2015-10-28T22:22:21Z

← Older revision		Revision as of 22:22, 28 October 2015
Line 1:		Line 1:
			We start by adding mGRE tunnels to our network configuration. In conjunction with IPsec VPNs this allows passing of routing information between connected networks.

			auto gre1
			iface gre1 inet static
			pre-up ip tunnel add $IFACE mode gre key 42 ttl 64 dev br0 \|\| true
			address 192.168.148.2
			netmask 255.255.255.255
			post-down ip tunnel del $IFACE \|\| true


			The vici plugin provides VICI, the Versatile IKE Configuration Interface. As its name indicates, it provides an interface for external applications to not only configure, but also to control and monitor the IKE daemon charon.


	My notes on DMVPN		My notes on DMVPN

Clandmeter: Protected "User:Clandmeter" ([Edit=Allow only administrators] (indefinite) [Move=Allow only administrators] (indefinite))

2015-10-27T16:04:50Z

Protected "User:Clandmeter" ([Edit=Allow only administrators] (indefinite) [Move=Allow only administrators] (indefinite))

← Older revision	Revision as of 16:04, 27 October 2015
(No difference)

Clandmeter at 16:03, 27 October 2015

2015-10-27T16:03:33Z

← Older revision		Revision as of 16:03, 27 October 2015
Line 1:		Line 1:
	My notes on DMVPN		My notes on DMVPN

	ip tunnel add gre1 mode gre remote 172.16.4.1 local 172.16.3.1 ttl 255		ip tunnel add gre1 mode gre remote 172.16.4.1 local 172.16.3.1 ttl 255
	ip link set gre1 up		ip link set gre1 up
	ip addr add 192.168.148.1/24 dev gre1		ip addr add 192.168.148.1/24 dev gre1


	ip tunnel add gre1 mode gre remote 172.16.3.1 local 172.16.4.1 ttl 255		ip tunnel add gre1 mode gre remote 172.16.3.1 local 172.16.4.1 ttl 255
	ip link set gre1 up		ip link set gre1 up
	ip addr add 192.168.148.2/24 dev gre1		ip addr add 192.168.148.2/24 dev gre1

Clandmeter: Created page with "My notes on DMVPN ip tunnel add gre1 mode gre remote 172.16.4.1 local 172.16.3.1 ttl 255 ip link set gre1 up ip addr add 192.168.148.1/24 dev gre1 ip tunnel add gre1 mode g..."

2015-10-27T16:02:16Z

Created page with "My notes on DMVPN ip tunnel add gre1 mode gre remote 172.16.4.1 local 172.16.3.1 ttl 255 ip link set gre1 up ip addr add 192.168.148.1/24 dev gre1 ip tunnel add gre1 mode g..."

New page

My notes on DMVPN

ip tunnel add gre1 mode gre remote 172.16.4.1 local 172.16.3.1 ttl 255
ip link set gre1 up
ip addr add 192.168.148.1/24 dev gre1

ip tunnel add gre1 mode gre remote 172.16.3.1 local 172.16.4.1 ttl 255
ip link set gre1 up
ip addr add 192.168.148.2/24 dev gre1