GRE-Tunnel

This commit is contained in:
root 2017-11-18 21:00:18 +01:00
parent a0d4c074c7
commit 704f74f44c
6 changed files with 174 additions and 0 deletions

View File

@ -0,0 +1,28 @@
#GRE-Tunnel zu fff-gw-m3
#
#[Jan ?Kraus (mayosemmel)]
#mayosemmel@googlemail.com
#
#fff-gw-m3
# öffentlich:
# freifunk: 10.50.252.168
#fff-ab-01
# öffentlich: 5.189.177.88
# freifunk: 10.50.252.169
auto fff-gw-m3
iface fff-gw-m3 inet static
address 10.50.252.169
pre-up iptunnel add $IFACE mode gre local 5.189.177.88 remote <remote-IP> ttl 225
up ifconfig $IFACE multicast
pointopoint 10.50.252.168
post-up iptables -t mangle -A POSTROUTING -p tcp --tcp-flags SYN,RST SYN -o $IFACE -j TCPMSS --clamp-mss-to-pmtu
post-up ip rule add iif $IFACE table fff
post-up ip rule add from 10.50.0.0/16 table fff
post-up ip rule add to 10.50.0.0/16 table fff
post-down ip rule del iif $IFACE table fff
post-down ip rule del from 10.50.0.0/16 table fff
post-down ip rule del to 10.50.0.0/16 table fff
post-down iptables -t mangle -D POSTROUTING -p tcp --tcp-flags SYN,RST SYN -o $IFACE -j TCPMSS --clamp-mss-to-pmtu
post-down iptunnel del $IFACE

View File

@ -0,0 +1,28 @@
#GRE-Tunnel zu fff-gw-wue2
#
#???? Michael Mifritscher (mifritscher)
#???? fff@mifritscher.de
#
#fff-gw-wue2
# öffentlich:
# freifunk: 10.50.252.166
#fff-ab-01
# öffentlich: 5.189.177.88
# freifunk: 10.50.252.167
auto fff-gw-wue2
iface fff-gw-wue2 inet static
address 10.50.252.167
pre-up iptunnel add $IFACE mode gre local 5.189.177.88 remote <remote-IP> ttl 225
up ifconfig $IFACE multicast
pointopoint 10.50.252.166
post-up iptables -t mangle -A POSTROUTING -p tcp --tcp-flags SYN,RST SYN -o $IFACE -j TCPMSS --clamp-mss-to-pmtu
post-up ip rule add iif $IFACE table fff
post-up ip rule add from 10.50.0.0/16 table fff
post-up ip rule add to 10.50.0.0/16 table fff
post-down ip rule del iif $IFACE table fff
post-down ip rule del from 10.50.0.0/16 table fff
post-down ip rule del to 10.50.0.0/16 table fff
post-down iptables -t mangle -D POSTROUTING -p tcp --tcp-flags SYN,RST SYN -o $IFACE -j TCPMSS --clamp-mss-to-pmtu
post-down iptunnel del $IFACE

View File

@ -0,0 +1,34 @@
#GRE-Tunnel zu fff-has
#
#Max Wohlfart (Moexe)
#
#fff-has
# öffentlich alt: 78.47.36.148
# öffentlich: 46.4.85.120
# freifunk: 10.50.252.158
#fff-ab-01
# öffentlich: 5.189.177.88
# freifunk: 10.50.252.159
auto fff-has
iface fff-has inet static
address 10.50.252.159
#pre-up iptunnel add $IFACE mode gre local 5.189.177.88 remote 78.47.36.148 ttl 225
pre-up iptunnel add $IFACE mode gre local 5.189.177.88 remote 46.4.85.120 ttl 225
up ifconfig $IFACE multicast
pointopoint 10.50.252.158
post-up iptables -t mangle -A POSTROUTING -p tcp --tcp-flags SYN,RST SYN -o $IFACE -j TCPMSS --clamp-mss-to-pmtu
post-up ip rule add iif $IFACE table fff
post-up ip rule add from 10.50.0.0/16 table fff
post-up ip rule add to 10.50.0.0/16 table fff
#Babel über GRE
post-up ip -6 addr flush dev $IFACE
post-up ip -6 addr add fe80::1984/64 dev $IFACE
post-down ip rule del iif $IFACE table fff
post-down ip rule del from 10.50.0.0/16 table fff
post-down ip rule del to 10.50.0.0/16 table fff
post-down iptables -t mangle -D POSTROUTING -p tcp --tcp-flags SYN,RST SYN -o $IFACE -j TCPMSS --clamp-mss-to-pmtu
post-down iptunnel del $IFACE

View File

@ -0,0 +1,32 @@
#GRE-Tunnel zu fff-has2
#
#Alexander Gutzeit (Plocker)
#alexander.gutzeit@googlemail.com
#fff-has2
# öffentlich: 5.189.166.50
# freifunk: 10.50.252.160
#fff-ab-01
# öffentlich: 5.189.177.88
# freifunk: 10.50.252.161
auto fff-has2
iface fff-has2 inet static
address 10.50.252.161
pre-up iptunnel add $IFACE mode gre local 5.189.177.88 remote 5.189.166.50 ttl 225
up ifconfig $IFACE multicast
pointopoint 10.50.252.160
post-up iptables -t mangle -A POSTROUTING -p tcp --tcp-flags SYN,RST SYN -o $IFACE -j TCPMSS --clamp-mss-to-pmtu
post-up ip rule add iif $IFACE table fff
post-up ip rule add from 10.50.0.0/16 table fff
post-up ip rule add to 10.50.0.0/16 table fff
#Babel über GRE
post-up ip -6 addr flush dev $IFACE
post-up ip -6 addr add fe80::1983/64 dev $IFACE
post-down ip rule del iif $IFACE table fff
post-down ip rule del from 10.50.0.0/16 table fff
post-down ip rule del to 10.50.0.0/16 table fff
post-down iptables -t mangle -D POSTROUTING -p tcp --tcp-flags SYN,RST SYN -o $IFACE -j TCPMSS --clamp-mss-to-pmtu
post-down iptunnel del $IFACE

View File

@ -0,0 +1,21 @@
auto fff-sw
iface fff-sw inet static
address 10.50.252.161
pre-up iptunnel add $IFACE mode gre remote 46.4.85.158 local 5.189.177.88 ttl 255
up ifconfig $IFACE multicast
pointopoint 10.50.252.8
post-up iptables -t mangle -A POSTROUTING -p tcp --tcp-flags SYN,RST SYN -o $IFACE -j TCPMSS --clamp-mss-to-pmtu
post-up ip rule add iif $IFACE table fff
post-up ip rule add from 10.50.0.0/16 table fff
post-up ip rule add to 10.50.0.0/16 table fff
post-up ip -6 addr flush dev $IFACE
# post-up ip -6 addr add fe80::babe:1:4/64 dev $IFACE
post-up ip -6 addr add fe80::1983:1:4/64 dev $IFACE
# post-up ip -6 addr add fe80::1985/64 dev $IFACE
post-down ip rule del iif $IFACE table fff
post-down ip rule del from 10.50.0.0/16 table fff
post-down ip rule del to 10.50.0.0/16 table fff
post-down iptables -t mangle -D POSTROUTING -p tcp --tcp-flags SYN,RST SYN -o $IFACE -j TCPMSS --clamp-mss-to-pmtu
post-down iptunnel del $IFACE

View File

@ -0,0 +1,31 @@
#GRE-Tunnel zu fff-wue1
#
#[Michael Mifritscher (mifritscher)]
#freifunk@mifritscher.de
#fff-wue1
# öffentlich: 188.40.170.116
# freifunk: 10.50.252.164
#fff-ab-01
# öffentlich: 5.189.177.88
# freifunk: 10.50.252.165
auto fff-wue1
iface fff-wue1 inet static
address 10.50.252.165
pre-up iptunnel add $IFACE mode gre local 5.189.177.88 remote 188.40.170.116 ttl 225
up ifconfig $IFACE multicast
pointopoint 10.50.252.164
post-up iptables -t mangle -A POSTROUTING -p tcp --tcp-flags SYN,RST SYN -o $IFACE -j TCPMSS --clamp-mss-to-pmtu
post-up ip rule add iif $IFACE table fff
post-up ip rule add from 10.50.0.0/16 table fff
post-up ip rule add to 10.50.0.0/16 table fff
#Babel über GRE
post-up ip -6 addr flush dev $IFACE
post-up ip -6 addr add fe80::1982/64 dev $IFACE
post-down ip rule del iif $IFACE table fff
post-down ip rule del from 10.50.0.0/16 table fff
post-down ip rule del to 10.50.0.0/16 table fff
post-down iptables -t mangle -D POSTROUTING -p tcp --tcp-flags SYN,RST SYN -o $IFACE -j TCPMSS --clamp-mss-to-pmtu
post-down iptunnel del $IFACE