[Xorp-users] Multicast over GRE tunnel between Cisco and Ubuntu 11.10

Thiago Anderson thiago at g3informatica.com.br
Tue Jan 10 18:34:54 PST 2012


Ben,

Thanks for helping the tunnel is booming .... hehehe multicast is ok ... to
anyone who want the setup done .... follows...

So details for the tunnel is a gre ipsec with:

Configuring ipsec with openswan:
conn tunnel00
        type=tunnel
        connaddrfamily=ipv4
        authby= secret
        left=your_net_ip
        leftnexthop=your_net_gw
        leftsubnet=ip_linux/32
        leftsourceip=source_ip
        rightsourceip=ip_cisco/32
        right=ip_cisco_net
        rightsubnet=ip_cisco/32
        ike=3des-md5,3des-sha-modp1024
        phase2alg=3des-md5-96,3des-sha1
        keyexchange=ike
        pfs=no
        auto=add
        rightid=ip_cisco_net
        leftid=your_net_ip


GRE tunnel configuration:

modprobe ip_gre
ip tu ad gre00 mode gre local ip_linux/32 remote ip_cisco/32 dev
internet_eth
ip ad ad dev gre00 ip_gre_linux peer ip_gre_cisco/30
ip li se dev gre00 up
ifconfig gre00 multicast

XORP configuration, installed from github:

eth2 is the network interface
gre00 is the gre tunnel

protocols {
        igmp {
                interface gre00 {
                        vif gre00 {
                                query-interval: 30
                        }
                }
                interface eth2 {
                        vif eth2 {
                        }
                }
        }
        pimsm4 {
                interface "register_vif" {
                        vif "register_vif" {
                        }
                }
                interface eth2 {
                        vif eth2 {
                        }
                }
                interface gre00 {
                        vif gre00 {
                        }
                }
                static-rps {
                        rp ip_rp {
                                group-prefix MULTICAST_GROUP/MASK {
                                }
                        }
                }
        }
        static {
                /*route 0.0.0.0/0 {
                        next-hop: ip_linux_net_gw
                }*/
                mrib-route 0.0.0.0/0 {
                        next-hop: ip_gre_cisco /* tunnel */
                }
        }
}
fea {
        unicast-forwarding4 {
        }
}
interfaces {
        interface eth2 {
                        default-system-config
                        vif eth2 {
                                address IP_INTERFACE_ETH2 {
                                        prefix-length: MASK
                                }
                        }
        }
        interface lo {
                vif lo {
                }
        }
        interface gre00 {
                default-system-config
                vif gre00 {
                        address ip_gre_linux {
                                prefix-length: 30
                                multicast-capable: true
                        }
                }
        }
}
plumbing {
        mfea4 {
                interface eth2 {
                        vif eth2 {
                        }
                }
                interface "register_vif" {
                        vif "register_vif" {
                        }
                }
                interface gre00 {
                        vif gre00 {
                        }
                }
        }
}




Thanks for everything once again, was about changing my fw linux for a
cisco router ... :)



Thiago Anderson

2012/1/10 Thiago Anderson <thiago at g3informatica.com.br>

> Hello, Ben
>
> Thank you I am testing and put the return.
>
> Thank you,
>
> Thiago
>
>
> 2012/1/10 Ben Greear <greearb at candelatech.com>
>
>> On 01/10/2012 11:43 AM, Thiago Anderson wrote:
>>
>>> Ok,
>>>
>>> Thx.
>>>
>>>
>> Please pull the latest and see how it works for you.  It compiles
>> on Ubuntu 11.10 for me now.
>>
>> Thanks,
>>
>> Ben
>>
>> --
>> Ben Greear <greearb at candelatech.com>
>> Candela Technologies Inc  http://www.candelatech.com
>>
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://mailman.ICSI.Berkeley.EDU/pipermail/xorp-users/attachments/20120111/5e8c97d2/attachment.html 


More information about the Xorp-users mailing list