25 Feb
2016
25 Feb
'16
5:26 a.m.
Just some clarifications on the setup of the ucst gateway IPIP tunnel.
It seems that the RIP messages receiving is not that easy to set up.
So, from what I found out, these are the steps. These are CLI commands but
they are also available in winbox and webfig.
1. Create the IPIP tunnel. Please use your own public address :-)
/interface ipip
add comment="UCSD AMPR Gateway" !keepalive local-address=89.122.215.236
name=ucsd-gw remote-address=169.228.66.251
2. Set up a VRF (virtual routing and forward) entry for the ucsd-gw
interface for net 44.0.0.0/8 and use some routing mark. I used "44rip".
(Important - This will associate all traffic on that interface with the
routing mark used)
/ip route vrf
add interfaces=ucsd-gw routing-mark=44rip
3. Add an accept filter rule on the input chain for RIP, which uses UDP, src
and dest port 520 on top of your fw rules
/ip firewall filter
add chain=input comment=RIP dst-port=520 in-interface=ucsd-gw protocol=udp
src-address=44.0.0.1 src-port=520
It also doesn't hurt to set up an accept rule for the encap protocol:
add chain=input comment="IP Encap" in-interface=RTC-PPPoE protocol=ipencap
4. Set up passive RIP routing to use routing table 44rip for the whole ampr
network. Don't forget to use the proper auth key - get it from a friend).
/routing rip
set garbage-timer=20m routing-table=44rip timeout-timer=10m update-timer=5m
/routing rip interface
add authentication=simple authentication-key=<password here>
in-prefix-list=ampr interface=ucsd-gw out-prefix-list=none passive=yes
receive=v2
/routing rip network
add network=44.0.0.0/8
This should give proper RIP routes in routing table 44rip. You can check it
using "/routing rip route print"
Output should be like this:
[admin@RT1-YO2LOJ] /routing rip route> print
Flags: C - connect, S - static, R - rip, O - ospf, B - bgp
# DST-ADDRESS GATEWAY FROM METRIC TIMEOUT
0 R 44.0.0.0/8 1
1 R 44.2.2.0/24 157.130.198.190 44.0.0.1 2 5m46s
2 R 44.2.4.0/29 50.250.204.153 44.0.0.1 2 5m46s
3 R 44.2.5.0/25 176.183.139.74 44.0.0.1 2 5m46s
4 R 44.2.10.0/29 71.130.72.52 44.0.0.1 2 5m46s
5 R 44.2.14.0/29 50.79.156.221 44.0.0.1 2 5m46s
[...]
510 R 44.208.58.0/28 87.10.236.252 44.0.0.1 2 9m12s
511 R 44.224.0.0/15 141.75.245.225 44.0.0.1 2 9m12s
I hope this helps.
Marius, YO2LOJ