GRE over IKEv2

RouterOS General
1

Hello everybody! I do not have static public IP addresses, so that is why i tried this configuration:

https://wiki.mikrotik.com/wiki/Manual:IP/IPsec#Site_to_Site_GRE_tunnel_over_IPsec_.28IKEv2.29_using_DNS

First question : Why do i need bridge for the server side ?
Second one: If i enable the keepalive on the GRE, the tunnel disconnect

Server side config:

https://pastebin.com/uQgsGRZU

Client side:
https://pastebin.com/npBvYqwq

Thank you very much for any help!

2

Note that this setup is only viable when one side is behind NAT. Otherwise you can specify DNS directly in GRE settings with ipsec-secret starting from 6.45.1.

The bridge on server side acts like a loopback interface on which the internal address is configured used for GRE tunnel communication. If enabling keepalive makes the tunnel not-running, then the tunnel is not running in the first place and probably something is not configured correctly.

3

Thank you very much for the information :slight_smile: I did not know about these details :slight_smile: