Problem with TCP and GRE tunnel
-
@stephenw10 All ips I have are "single" i dont have an entire subnet
-
Yeah those IPs are inconveniently not in a single /29!
But what subnet sizes (masks) do you have set on the interfaces?
-
-
OK so everything is /24 and thus you have the same subnet at both ends on the tunnel. Hence, routing conflict with that iperf command and anything else sourced from the firewall itself.
Really you want those things is different subnets but because the remote WAN is using .132 you can't use /25 there.
I would try to set the gateway as outside the subnet. There's a setting for that in the advanced gateway settings: 'Use non-local gateway'
You can then set the remote WAN subnet to something much smaller, /32 even.
Then you can set the other IPs in a different subnet such as 185.113.141.208/28. You can add that as the static route on the remote pf and then use the IPs directly on the local pf.
The local pf LAN should use one of those IPs.
As an alternative to all of that you could just add all the IPs at the remote side as VIPs and then NAT the traffic to/from them and use private IPs at the local LAN.
Steve
-
S stephenw10 referenced this topic on
