knome
Hey folks,
I need a sanity check on a simple thing:
I would like to run a GRE tunnel THROUGH an OpenVPN tunnel, as I would like to run BGP across a full mesh vpn, as my backup for a full mesh MPLS.
I do NOT want to have ANY routes in OpenVPN, other than what is needed for connectivity.
All routers sprechen OpenVPN and BGP.
I set this up in a simple case between two servers (pfSense 2.0.1), and the OpenVPN tunnel came up just fine, and was pingable, however when I setup the GRE tunnel to use it, I got no love.
I set the GRE tunnel's remote address as the OpenVPNs address, opposite sides, for both sides.
The GRE's private addresses were not anywhere near the OpenVPN's addresses (although, this should be invisible to the OpenVPN tunnel).
/30s all around
Is there something intrinsically wrong with this scenario, or do I have something to debug?
Or, is there a way to route across OpenVPN without having to use a GRE tunnel inside it?
My other option, already proven working, is to use GRE over IPSEC, but I'd much rather use OpenVPN.
--T
