EoIP Problem

tbutcher · January 11, 2006, 7:07pm

I have created an EoIP tunnel between an x86 router and a Routerboard router. They have different MACs but the same tunnel ID and I have assigned an IP to each tunnel. Both router can ping each other on the external address but can ping each other using the tunnel address. I see TX packets on the Routerboard when i try and ping but no RX packets. On the x86 router there is no TX or RX packets when pinging.

I have successfully created a PPTP connection so I know the firewalls are open for GRE.

Does any anybody have EoIP working on 2.9.10? Also how can I tell if the tunnel is successfully connected?

Tim

tbutcher · January 12, 2006, 5:20pm

Is nobody using EoIP?

Tim

YazzY · January 13, 2006, 10:49am

Yeah, it’s a simple tap interface that Mikrotik renamed to make it easier to understand the purpose of it. The same goes to IPIP which is a tun iface.
EoIP allways worked for me.
Did you check your input chains ?

HarvSki · January 13, 2006, 10:55am

I’ve been having trouble with EoIP, it would be good to have a status indicator to know if it is running correctly or at least something in the log.

YazzY · January 13, 2006, 10:56am

What RouterOS version(s) are you using on the peers?

HarvSki · January 13, 2006, 11:11am

I’ve had issues with it on 2.8.28 and 2.9.x

YazzY · January 13, 2006, 11:14am

Allways on the same hardware or did you try to switch your nics etc and see how it acts?

tbutcher · January 13, 2006, 6:28pm

I have tried plugging the router together and still I can’t ping using the EoIP tunnel. Do you need a certain NIC to support EoIP like you do for VLAN?

Tim

tbutcher · January 13, 2006, 10:30pm

Ok I have fixed the problem. I was dropping invalid packets, when I disabled the firewall EoIP started working as expected.

Thanks.

Tim

YazzY · January 14, 2006, 12:20am

That’s exactly what I told you to do in my first answer.
I am glad you solved it, good luck.

HarvSki · January 17, 2006, 12:15am

Tim

Can you check http://wiki.mikrotik.com/wiki/EoIP and see if I got it right - updated it if it is wrong. We are getting some real gems of info here in Prague but forgot to ask about this one yet

Harv

tbutcher · January 17, 2006, 8:47am

The instructions look fine but I suggest you add a note that if you drop invalid connections on your firewall it will not work. Drop invalid connections is recommend in the FAQ on “Securing your router” so I expect quite a few people will be doing it.

Tim