I am trying to build an EOIP tunnel through another firewall.

I need the port number and protocol that EOIP uses to configure the firewall in the middle.

From the manual:

The EoIP protocol encapsulates Ethernet frames in GRE (IP protocol number 47) packets (just like PPTP) and sends them to the remote side of the EoIP tunnel.

http://wiki.mikrotik.com/wiki/Manual:Interface/EoIP

Is someone going to add it to the wiki article?

It says it uses GRE like pptp but I tried to map the pptp port to no avail.

There is no port.

PPTP runs a control channel on tcp/1723 and data flows over GRE, which is IP protocol 47. EoIP, like PPTP, runs over GRE (IP protocol 47) but doesn't have a control channel.

There is no port.

PPTP runs a control channel on tcp/1723 and data flows over GRE, which is IP protocol 47. EoIP, like PPTP, runs over GRE (IP protocol 47) but doesn't have a control channel.

hi fewi i am new in mikrotik i have some question about the EoIP tunnel as i read the documentation http://wiki.mikrotik.com/wiki/Manual:Interface/EoIP that the tunnel must be same subnet, now im wondering because both mik <<<<>>>mik has a same dhcp both sides what would be the implication if this two mik will establish the connection.

1. it could possible ip conflict because same subnet of both sides?
2. pc client both sides must be static or dynamic?

client pc --- mik1 >>>>EoIP <<<<mik2 ---- client pc

thanks fewi

Yes, there'd be an IP conflict. Presumably hosts on either side would prefer the host on their side as that ARP reply would come much sooner, I guess.

You can use DHCP on both sides, just make sure the pools don't overlap.

Yes, there'd be an IP conflict. Presumably hosts on either side would prefer the host on their side as that ARP reply would come much sooner, I guess.

You can use DHCP on both sides, just make sure the pools don't overlap.

thanks fewi for quick response, i think the best solution as you said dont make the pool range dont overlap in both sides.

tnx

Yes, there'd be an IP conflict. Presumably hosts on either side would prefer the host on their side as that ARP reply would come much sooner, I guess.

You can use DHCP on both sides, just make sure the pools don't overlap.

hi fewi good afternoon i try a several test both mik, i saw packets sending tx/rx in eoip interfaces, bridge port and so forth, the problem is in the dhcp because both mik has 192.168.1.0/24 dhcp and it shows dhcp error in mik2 (red color) in mik1 no error shows in dhcp, where do i missed the configuration?

thanks

I don't know. I guess in the DHCP configuration, if that's showing red. Post it here.

Can eoip tunnel true nat, i tryed but i can't

Some NAT do not work with GRE protocol.
It nat TCP or UDP but it dont NAT GRE protokol
For example Ericson NAT do not nat GRE