diff options
Diffstat (limited to 'doc/update-gre-address.md')
| -rw-r--r-- | doc/update-gre-address.md | 48 |
1 files changed, 48 insertions, 0 deletions
diff --git a/doc/update-gre-address.md b/doc/update-gre-address.md new file mode 100644 index 0000000..80902b9 --- /dev/null +++ b/doc/update-gre-address.md @@ -0,0 +1,48 @@ +Update GRE configuration with dynamic addresses +=============================================== + +[](https://github.com/eworm-de/routeros-scripts/stargazers) +[](https://github.com/eworm-de/routeros-scripts/network) +[](https://github.com/eworm-de/routeros-scripts/watchers) +[](https://mikrotik.com/download/changelogs/) +[](https://t.me/routeros_scripts) +[](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J) + +[⬅️ Go back to main README](../README.md) + +> ℹ️ **Info**: This script can not be used on its own but requires the base +> installation. See [main README](../README.md) for details. + +Description +----------- + +Running a GRE tunnel over IPSec with IKEv2 is a common scenario. This is +easy to configure on client, but has an issue on server side: client IP +addresses are assigned dynamically via mode-config and have to be updated +for GRE interface. + +This script handles the address updates and disables the interface if the +client is disconnected. + +Requirements and installation +----------------------------- + +Just install the script: + + $ScriptInstallUpdate update-gre-address; + +... and add a scheduler to run the script periodically: + + /system/scheduler/add interval=30s name=update-gre-address on-event="/system/script/run update-gre-address;" start-time=startup; + +Configuration +------------- + +The configuration goes to interface's comment. Add the client's IKEv2 +certificate CN into the comment: + + /interface/gre/set comment="ikev2-client1" gre-client1; + +--- +[⬅️ Go back to main README](../README.md) +[⬆️ Go back to top](#top) |