Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have a checkpoint S-Box which is a gateway for network 192.168.0.0/24. Internal IP is 192.168.0.1.

On the S-Box configured static VPN tunnel with local IP 10.x.x.x and remote 10.y.y.y. I need to create a GRE tunnel with local 10.z.z.z and remote 10.w.w.w;

The problem that S-Box doesn't support GRE tunneling. (but recognized it and may forward) May I create a tunnel from linux machine (debian, kernel 2.6.26) placed at 192.168.0.5? How I do it?

Also, the other side want my addresses be 10.q.q.q/24, how do i provide this?

Thank you in advance.

share|improve this question
add comment

1 Answer

How to setup a GRE tunnel is described at http://lartc.org/howto/lartc.tunnel.gre.html With iptables you should be able to rewrite packets. Something along the lines of:

iptables -A POSTROUTING -j SNAT -t nat -o gre0 -d 10.y.y.y --to-source 10.q.q.1-10.q.q.254

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.