2020-03-27 20:51:40 +00:00
|
|
|
Update GRE configuration with dynamic addresses
|
|
|
|
|
===============================================
|
|
|
|
|
|
|
|
|
|
[◀ Go back to main README](../README.md)
|
|
|
|
|
|
2021-05-03 13:07:50 +00:00
|
|
|
🛈 This script can not be used on its own but requires the base installation.
|
|
|
|
|
See [main README](../README.md) for details.
|
|
|
|
|
|
2020-03-27 20:51:40 +00:00
|
|
|
Description
|
|
|
|
|
-----------
|
|
|
|
|
|
|
|
|
|
Running a GRE tunnel over IPSec with IKEv2 is a common scenario. This is
|
|
|
|
|
easy to configure on client, but has an issue on server side: client IP
|
|
|
|
|
addresses are assigned dynamically via mode-config and have to be updated
|
|
|
|
|
for GRE interface.
|
|
|
|
|
|
|
|
|
|
This script handles the address updates and disables the interface if the
|
|
|
|
|
client is disconnected.
|
|
|
|
|
|
|
|
|
|
Requirements and installation
|
|
|
|
|
-----------------------------
|
|
|
|
|
|
|
|
|
|
Just install the script:
|
|
|
|
|
|
|
|
|
|
$ScriptInstallUpdate update-gre-address;
|
|
|
|
|
|
|
|
|
|
... and add a scheduler to run the script periodically:
|
|
|
|
|
|
|
|
|
|
/ system scheduler add interval=30s name=update-gre-address on-event="/ system script run update-gre-address;" start-time=startup;
|
|
|
|
|
|
|
|
|
|
Configuration
|
|
|
|
|
-------------
|
|
|
|
|
|
|
|
|
|
The configuration goes to interface's comment. Add the client's IKEv2
|
|
|
|
|
certificate CN into the comment:
|
|
|
|
|
|
|
|
|
|
/ interface gre set comment="ikev2-client1" gre-client1;
|
|
|
|
|
|
|
|
|
|
---
|
|
|
|
|
[◀ Go back to main README](../README.md)
|
|
|
|
|
[▲ Go back to top](#top)
|
