Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I have a checkpoint S-Box which is a gateway for network Internal IP is

On the S-Box configured static VPN tunnel with local IP 10.x.x.x and remote 10.y.y.y. I need to create a GRE tunnel with local 10.z.z.z and remote 10.w.w.w;

The problem that S-Box doesn't support GRE tunneling. (but recognized it and may forward) May I create a tunnel from linux machine (debian, kernel 2.6.26) placed at How I do it?

Also, the other side want my addresses be 10.q.q.q/24, how do i provide this?

Thank you in advance.

share|improve this question

How to setup a GRE tunnel is described at With iptables you should be able to rewrite packets. Something along the lines of:

iptables -A POSTROUTING -j SNAT -t nat -o gre0 -d 10.y.y.y --to-source 10.q.q.1-10.q.q.254

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.