49 lines
2.2 KiB
Markdown
49 lines
2.2 KiB
Markdown
Update GRE configuration with dynamic addresses
|
||
===============================================
|
||
|
||
[](https://github.com/eworm-de/routeros-scripts/stargazers)
|
||
[](https://github.com/eworm-de/routeros-scripts/network)
|
||
[](https://github.com/eworm-de/routeros-scripts/watchers)
|
||
[](https://mikrotik.com/download/changelogs/)
|
||
[](https://t.me/routeros_scripts)
|
||
[](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=A4ZXBD6YS2W8J)
|
||
|
||
[⬅️ Go back to main README](../README.md)
|
||
|
||
> ℹ️ **Info**: This script can not be used on its own but requires the base
|
||
> installation. See [main README](../README.md) for details.
|
||
|
||
Description
|
||
-----------
|
||
|
||
Running a GRE tunnel over IPSec with IKEv2 is a common scenario. This is
|
||
easy to configure on client, but has an issue on server side: client IP
|
||
addresses are assigned dynamically via mode-config and have to be updated
|
||
for GRE interface.
|
||
|
||
This script handles the address updates and disables the interface if the
|
||
client is disconnected.
|
||
|
||
Requirements and installation
|
||
-----------------------------
|
||
|
||
Just install the script:
|
||
|
||
$ScriptInstallUpdate update-gre-address;
|
||
|
||
... and add a scheduler to run the script periodically:
|
||
|
||
/system/scheduler/add interval=30s name=update-gre-address on-event="/system/script/run update-gre-address;" start-time=startup;
|
||
|
||
Configuration
|
||
-------------
|
||
|
||
The configuration goes to interface's comment. Add the client's IKEv2
|
||
certificate CN into the comment:
|
||
|
||
/interface/gre/set comment="ikev2-client1" gre-client1;
|
||
|
||
---
|
||
[⬅️ Go back to main README](../README.md)
|
||
[⬆️ Go back to top](#top)
|