IPIP tunnel behind NAT

RouterOS General
1

Hello.

Is there any way to configure a ipip tunnel where the one of the MT device behind the NAT?

2

Anyone help?

3

as long as they can ping each other, can’t see any reason why you would be able to do

4

Thanks. And which ports need to be forwarded the ipip tunnel endpoint behind the NAT. What is the proper config?

5

Very tricky.
You can’t forward the packets, because they have no port :wink: Only UDP and TCP packets have ports. IPIP tunnels are basicly IP packets with another IP header wrapped around them.

Possible solution:
Depending on the NAT router you could forward any packet with the source IP of your IPIP tunnel endpoint to the device behind the router.

edit:
If you only need a tunnel, try another VPN protocol like L2TP. Easiest way: Client behind NAT.
And always remember: NAT is EVIL!