• Set up GRE tunnel. Sendto error:5

    General pfSense Questions
    3
    0 Votes
    3 Posts
    669 Views
    V

    @stephenw10
    Thanks,i've already solved the problem.
    Forget to lanuch the gateway opposite my local net caused this error.

  • GRE tunnel question

    IPsec
    2
    0 Votes
    2 Posts
    1k Views
    S

    Just want to reply here my discoveries, to save people the hassle of attempting this to find out it does not work, there are two types of GRE tunnels, GRETAP and GRETUN, one supports layer 2 features such as broadcast/multicast and one does not, the PFSense implementation appears to use the later which does not support this feature, please see the following article to show the difference

    https://developers.redhat.com/blog/2019/05/17/an-introduction-to-linux-virtual-interfaces-tunnels#:~:text=While%20GRE%20tunnels%20operate%20at,header%20in%20the%20inner%20header.

    You would need a local UDP relay instead (on the client side) to instead allow the client to relay these broadcast message as unicast to a specific host, I struggled with this for Windows File Sharing (WS-Discovery) broadcast packets and ended up resorting to a script that auto maps all network drives on successful client connection, perhaps someone could get this working with a L2TP on top of Wireguard?

    https://github.com/sparky3387/automapwireguard - Shameless plug of the automap script if someone else also needs this.........

  • 0 Votes
    1 Posts
    535 Views
    No one has replied
  • Solution for Multicast Over Tunnel

    General pfSense Questions
    7
    0 Votes
    7 Posts
    3k Views
    dotdashD

    @CNLiberal said in Solution for Multicast Over Tunnel:

    haven't found decent OpenVPN software for the Mac yet.

    On this point, the client linked on this page from the OpenVPN Access server docs, in my experience, works fine with an OpenVPN server on pfSense. Just import the standard config. I have not tried this with a tap connection. I used the 2.7 version, and haven't tested the 3.1 beta. The page also mentions alternate clients.
    https://openvpn.net/vpn-server-resources/connecting-to-access-server-with-macos/

  • 0 Votes
    2 Posts
    748 Views
    K

    @vistatech said in routing specific packets through IPSEC gre tunnel:

    10.1.1.20

    Hey
    And why is outgoing NAT used ?
    Try disabling it . I have a similar scheme and everything works fine without NAT.
    The question such, Pfsense can ping a host 10.1.1.20 ?