Welcome, Guest. Please login or register.

Author Topic: Support creating generic tunnel interface (GIF)  (Read 778 times)

tuaris

  • Newbie
  • *
  • Posts: 17
  • Karma: +0/-0
    • View Profile
Support creating generic tunnel interface (GIF)
« on: January 17, 2021, 02:26:45 PM »
This is a feature request to support creating a generic tunnel interface:
https://www.freebsd.org/cgi/man.cgi?query=gif

A use case example is with https://tunnelbroker.net.  The tunnel would be created as follows on a FreeBSD system

Code: [Select]
ifconfig gif0 create
ifconfig gif0 tunnel $IPv4_address_of_Firewall WAN interface $IPv4_address_of_remote_tunnel_server
ifconfig gif0 inet6 $assigned_IPV6_client_address $assigned_IPV6_endpoint_address prefixlen $given_prefixlen
route -n add -inet6 default $assigned_IPV6_endpoint_address
ifconfig gif0 up

The GUI/form to create this interface would probably be a new tab under Interfaces with a page name like interfaces_gif.php.  The form would prompt for the variables above:

Code: [Select]
$IPv4_address_of_Firewall = get_ip_of_wan_inet();
$IPv4_address_of_remote_tunnel_server= "x.x.x.x";
$assigned_IPV6_client_address = "x:x:x:x::x";
$assigned_IPV6_endpoint_address = "x:x:x:x::x";
$given_prefixlen = 128;

Afterwards a new interface should be present on the firewall, and the firewall has IPv6 connectivity.  The part I'm unsure of how to do (since I haven't experimented with dual stack yet, is how to configure the firewall to use dual stack to 1) provide cleints with IPv6 addresses, and 2) route IPv6 client packets over the GRE tunnel.

andywhite

  • Administrator
  • Full Member
  • *****
  • Posts: 124
  • Karma: +0/-0
    • View Profile
Re: Support creating generic tunnel interface (GIF)
« Reply #1 on: January 31, 2021, 08:18:04 PM »
Hi !

There is support already there , carried over from m0n0wall days, for an ipv6 tunnel. 

Once ipv6 is enabled (in the system settings), the wan interface will show options for using a tunnel endpoint for ipv6

tuaris

  • Newbie
  • *
  • Posts: 17
  • Karma: +0/-0
    • View Profile
Re: Support creating generic tunnel interface (GIF)
« Reply #2 on: March 22, 2021, 06:24:46 PM »
Ah, thanks.  I didn't realize this was already possible.