<?xml version="1.0" encoding="UTF-8"?><rss xmlns:dc="http://purl.org/dc/elements/1.1/" xmlns:content="http://purl.org/rss/1.0/modules/content/" xmlns:atom="http://www.w3.org/2005/Atom" version="2.0"><channel><title><![CDATA[FRR: BGP routes via GRE over ipsec]]></title><description><![CDATA[<p dir="auto">Hi All I am new to FRR and routing in general and am looking for some advice.</p>
<p dir="auto">I am attempting to setup my pfsense to reach a remote private network provided by my Telecom provider. The telecom provider uses two redundant paths to the remote private network and uses BGP to switch routes between those paths.</p>
<p dir="auto">The BGP endpoint(10.160.128.29/32) is setup on OPT2 in PFSense and Opt 1 is the GRE tunnel which is setup like this:</p>
<p dir="auto"><img src="/assets/uploads/files/1579570921840-04748295-2e66-4370-a681-eb0c70878f3d-image.png" alt="04748295-2e66-4370-a681-eb0c70878f3d-image.png" class=" img-fluid img-markdown" /></p>
<p dir="auto">Both Endpoints of the GRE tunnel are connected via an IPsec tunnel between my pfsense and the telecom firewall.</p>
<p dir="auto">Now I think i've got most of the above working using FRR for the BGP connection, which is established with Telecom provider and I receive the proper route which is:</p>
<p dir="auto"><img src="/assets/uploads/files/1579572129503-5538e1f6-403f-4b63-a2f5-99fdb821a6fa-image.png" alt="5538e1f6-403f-4b63-a2f5-99fdb821a6fa-image.png" class=" img-fluid img-markdown" /></p>
<p dir="auto">10.102.255.237 is the telecom side of the GRE tunnel</p>
<p dir="auto">Now my issue is how do I get to the remote network from one of the other networks attached to pfsense(The LAN for example)</p>
<p dir="auto">When I ping the remote network from the PFSense side of the GRE tunnel(10.102.255.238) i get replies no problem. Meaning my connection to the remote network seems to be working as expected, except only when sourcing from the PFSense side of the GRE.</p>
<p dir="auto">If I try to ping the remote network from the LAN or even OPT2(10.160.128.29/32) I get nothing but time outs.</p>
<p dir="auto">Seems like I'm just missing something simple now like a static route(I've tried a few to no avail) or similar to get connectivity from my LAN network. But I have a feeling theres something in the big picture I am missing</p>
<p dir="auto">Does anyone have any thoughts?</p>
<p dir="auto">Thanks in advance.</p>
<p dir="auto">PS all interfaces except WAN have any/any rules. All interfaces local to pfsense can ping one/another</p>
]]></description><link>https://forum.netgate.com/topic/149848/frr-bgp-routes-via-gre-over-ipsec</link><generator>RSS for Node</generator><lastBuildDate>Sat, 18 Jul 2026 00:40:00 GMT</lastBuildDate><atom:link href="https://forum.netgate.com/topic/149848.rss" rel="self" type="application/rss+xml"/><pubDate>Tue, 21 Jan 2020 02:05:58 GMT</pubDate><ttl>60</ttl><item><title><![CDATA[Reply to FRR: BGP routes via GRE over ipsec on Wed, 22 Jan 2020 16:47:12 GMT]]></title><description><![CDATA[<p dir="auto">Got it figured with some basic reading. What i was missing was the policy based routing via firewall rules as described here:</p>
<p dir="auto">https://docs.netgate.com/pfsense/en/latest/routing/directing-traffic-with-policy-routing.html</p>
]]></description><link>https://forum.netgate.com/post/887235</link><guid isPermaLink="true">https://forum.netgate.com/post/887235</guid><dc:creator><![CDATA[NinjaActionJeans]]></dc:creator><pubDate>Wed, 22 Jan 2020 16:47:12 GMT</pubDate></item></channel></rss>