Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    GRE packets dropped when accessing a VPN

    Scheduled Pinned Locked Moved Firewalling
    16 Posts 2 Posters 5.0k Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • J
      jmgc
      last edited by

      Hi,

      I can connect to a VPN. GRE packets come through my firewall interfaces out to the destination IP in the cloud, but they are dropped on their way back to the firewall. I can't either reach the private IP on the other side via the VPN connection.

      In some way, do I need to create a GRE tunnel as if it were another interface?

      I'd appreciate some help on this issue.

      Best regards,

      Joe

      1 Reply Last reply Reply Quote 0
      • M
        Metu69salemi
        last edited by

        Is your modem set bridge or routing?

        I had once problems with my setup where one of the interfaces didn't work at web and the problem was that modem captured incoming trafic(same ip was setup in both)
        So if possible use purely bridging mode

        1 Reply Last reply Reply Quote 0
        • J
          jmgc
          last edited by

          I really appreciate your answer. It seems your scenario and mine are not quite the same. I'm more specific this time.

          I'm not using any modem at all. I setup a VPN connection to a public ip 200.x.x.x using the connection wizard on my WinXP. I connect to the VPN from behind the firewall. I see the GRE packets go out without problems as well as some other TCP packets through my pfsense firewall. However GRE packets are dropped on their way back.

          Looking for answers I came to realize I could setup a GRE tunnel on Interfaces. At this point, I don't know in what way this two things could be related.

          Thanks again,

          Joe

          1 Reply Last reply Reply Quote 0
          • M
            Metu69salemi
            last edited by

            Then I can't help sorry

            1 Reply Last reply Reply Quote 0
            • J
              jmgc
              last edited by

              Hi there,

              I'm sorry about misunderstanding your point about the modem. I don't know why I setup my mind on a dialing modem.

              How can I check up either my modem is in rounting or bridge mode? This is the first time I'm dealing with this issue.

              Joe

              1 Reply Last reply Reply Quote 0
              • M
                Metu69salemi
                last edited by

                when i sayed dialing?
                *dsl / cable - modems do exists also

                Try to search from google with your modems/routers name and model and add username/password
                -OR-
                you can try this

                1 Reply Last reply Reply Quote 0
                • J
                  jmgc
                  last edited by

                  I can sign in and check the settings of my modem. Is that what you mean?

                  Joe

                  1 Reply Last reply Reply Quote 0
                  • M
                    Metu69salemi
                    last edited by

                    Is your setup bridging or routing?

                    1 Reply Last reply Reply Quote 0
                    • J
                      jmgc
                      last edited by

                      It's a routing setup!!!!

                      1 Reply Last reply Reply Quote 0
                      • M
                        Metu69salemi
                        last edited by

                        And you're having double nat with pfsense?
                        so that pfsense has something like this:
                        wan: 192.168.100.10 /24
                        lan: 192.168.1.1 /24?

                        1 Reply Last reply Reply Quote 0
                        • J
                          jmgc
                          last edited by

                          Yes, I have

                          Lan: 192.168.1.2 / 24

                          Wan on DHCP: range 192.168.15.x / 24

                          As extra information, I'm doing NAt on port 80 and forwarding to one IP in the subnet.

                          Joe

                          1 Reply Last reply Reply Quote 0
                          • M
                            Metu69salemi
                            last edited by

                            Well,

                            GRE is part of ip, but not tcp or udp, it's not a port which you can forward to, unless you're having separate support to it.
                            If it is possible by anymeans, change to bridging configuration and then GRE should work a bit better

                            1 Reply Last reply Reply Quote 0
                            • J
                              jmgc
                              last edited by

                              Got ya!!!,

                              I wouldn't like to switch to brigde mode since I can lose some of the advantages over routing. Meanwhile I'm accessing the VPN from a pc out of the firewall.

                              Now, what is the GRE tunneling on Interfaces used for?

                              Thanks in advanced again for all your time and help.

                              Joe

                              1 Reply Last reply Reply Quote 0
                              • M
                                Metu69salemi
                                last edited by

                                GRE on wiki

                                May i ask what is so big advantage to route in a modem vs firewall?

                                1 Reply Last reply Reply Quote 0
                                • J
                                  jmgc
                                  last edited by

                                  I focused on the advantage of routing over bridging in a firewall. I can not tell on the modem. I've bin trying to find where I can switch my modem to the bridge mode without luck. I'll check GRE on wiki. Any suggestion from you is valuable.

                                  Joe

                                  1 Reply Last reply Reply Quote 0
                                  • M
                                    Metu69salemi
                                    last edited by

                                    I only tried to suggest that, change your modem to bridging and use only firewall in routing mode.
                                    that ease a bit to troubleshoot gre and other things also.

                                    1 Reply Last reply Reply Quote 0
                                    • First post
                                      Last post
                                    Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.