!tCyGickeVqkHsYjWnh:nixos.org

NixOS Networking

916 Members
Declaratively manage your switching, routing, wireless, tunneling and more.274 Servers

Load older messages


SenderMessageTime
23 Jun 2026
@nico:c3d2.deNicoWell for forwarding, you need to setup something like a bridge, otherwise you will have just l2 connectivity to the other end of the tunnel16:44:44
@matthewcroughan:defenestrate.itmatthewcroughanAh okay so on one side of the tunnel I need a bridge, and on the other side I don't 16:45:14
@nico:c3d2.deNicoI depends on what your goal is. If you setup a bridge you can use the other end of the tunnel for l2 protocols. If you have a dhcp server in the network you could try to run e.g. dhclient for debugging purpose16:46:47
@nico:c3d2.deNico I'm not that familiar with the whole systemd-networkd configuration stuff. In ifstate it's pretty much straight forward.
Not sure why the hell this assigned the remote address to tun0... Kinda weird, if you ask me. Try to investigate using ip -d l tun0
16:51:26
@matthewcroughan:defenestrate.itmatthewcroughanOh I was just trying things to see if it changed anything16:53:32
@matthewcroughan:defenestrate.itmatthewcroughanI was binding it to eth0 originally 16:53:36
@matthewcroughan:defenestrate.itmatthewcroughantun0 is the ygg address and interface16:53:50
@nico:c3d2.deNicoAlso when you say non ip traffic, do you mean common protocols like ethernet / llc or are you talking about proprietary protocols?16:53:57
@matthewcroughan:defenestrate.itmatthewcroughaneth0 is where the actual non-ip stuff is happening16:54:00
@nico:c3d2.deNicoA tunnel (like gre) requires a local address and a remote address just to establish the tunnel itself. If needed you can assign inner tunnel ips to the interface, but in your case, you may not want that in the end (it can be helpful for debugging) though. Try to debug this using tcpdump, just to see if the tunnel has been established and your l2 traffic is being forwarded properly16:56:23
@matthewcroughan:defenestrate.itmatthewcroughanyeah guess so, I just expected it to work :P17:04:20
@matthewcroughan:defenestrate.itmatthewcroughannot used tcpdump before 17:04:23
@matthewcroughan:defenestrate.itmatthewcroughanCould it be MTU as well?17:05:09
@nico:c3d2.deNico
tcpdump protochain gre
17:05:13
@matthewcroughan:defenestrate.itmatthewcroughan I've switched to using networking.greTunnels 17:05:21
@matthewcroughan:defenestrate.itmatthewcroughanJust to get to a more common setup17:05:29
@nico:c3d2.deNicoIt depends, check tcpdump17:05:31
@nico:c3d2.deNicoYea, wouldn't recommend that either 😂17:05:50
@matthewcroughan:defenestrate.itmatthewcroughancrap17:05:59
@matthewcroughan:defenestrate.itmatthewcroughanI just need a good "working" config that is documented lol17:06:05
@nico:c3d2.deNicoIfstate has an example :D17:06:31
@nico:c3d2.deNicohttps://ifstate.net/2.4/examples/gretap/17:06:33
@nico:c3d2.deNicoYou can also just use the CLI instructions to create it17:07:09
@matthewcroughan:defenestrate.itmatthewcroughan Nico: Do I need some ipv6 forwarding thing to exist and be set in sysctl? Nico 17:14:30
@casey:hubns.netcasey ©if you aren't forwarding ip, you don't need to enable forwarding ip.17:15:14
@matthewcroughan:defenestrate.itmatthewcroughanMy thoughts exactly, just wanted to confirm there's not some quirk 17:15:49
@matthewcroughan:defenestrate.itmatthewcroughanso I have both VMs open in shells now with no gre config, I'll try manually adding17:16:06
@nico:c3d2.deNico👍️17:17:09
@matthewcroughan:defenestrate.itmatthewcroughan [root@nixos:~]# ip -6 link add eogre type gretap local 200:fe12:89ec:86b6:ce32:9e0a:389:44d3 remote 200:25e6:e48d:963:3c5e:6466:87d4:a951 17:55:25
@matthewcroughan:defenestrate.itmatthewcroughan this results in Error: inet address is expected rather than "200:fe12:89ec:86b6:ce32:9e0a:389:44d3". 17:56:00

Show newer messages


Back to Room ListRoom Version: 6