Anyone have a definitive list or info on network operators who definately allow or definately disallow GRE packets across their networks. Sorry for the semi-operational content :) Eric ============================================================================= Eric Germann Computer and Communications Technologies ekgermann@cctec.com Van Wert, OH 45891 Phone: 419 968 2640 http://www.cctec.com Fax: 419 968 2641 Network Design, Connectivity & System Integration Services A Microsoft Solution Provider "Linux.. the choice of a gnutered generation." - brad@poofy.tbn.tm
Anyone have a definitive list or info on network operators who definately allow or definately disallow GRE packets across their networks.
Sorry for the semi-operational content :)
It's hard to imagine any serious network providers who would block arbitrary kinds of traffic. Anything you'd hope to gain by such an action seems futile anyway -- the people you're trying to stop could always tunnel through some other mechanism. --jhawk (we certainly allow GRE packets and expect everyone else does, too)
In message <199806171954.PAA14489@all-purpose-gunk.near.net>, John Hawkinson writes:
Anyone have a definitive list or info on network operators who definately allow or definately disallow GRE packets across their networks.
Sorry for the semi-operational content :)
It's hard to imagine any serious network providers who would block arbitrary kinds of traffic.
Several others have posted replies on this topic, but they've missed the most common situation. I've seen (major) network providers with the following access rules in their routers: allow tcp allow udp allow icmp deny * While not explicitly blocking GRE, they're implicitly dropping everything (including IPsec traffic, which is how I found this; my corporate VPNs weren't working :-). Of course, trying to get this resolved took *weeks*, because I couldn't talk to anybody who understood that there were protocols besides the ones listed above... *sigh. -- Harald Koch <chk@utcc.utoronto.ca>
This could kill IP-GRE VPNs indiscriminately. At 02:00 PM 6/17/98 -0400, Eric Germann wrote:
Anyone have a definitive list or info on network operators who definately allow or definately disallow GRE packets across their networks.
Sorry for the semi-operational content :)
Eric
============================================================================= Eric Germann Computer and Communications Technologies ekgermann@cctec.com Van Wert, OH 45891 Phone: 419 968 2640
http://www.cctec.com Fax: 419 968 2641
Network Design, Connectivity & System Integration Services A Microsoft Solution Provider
"Linux.. the choice of a gnutered generation." - brad@poofy.tbn.tm
I realize this will kill the tunnels. My point is to find out what networks, if any, may do this. A client is planning on doing tunneling and I am probing for feasibility. Thanks. At 04:34 PM 6/17/98 -0400, Paul G. Donner wrote:
This could kill IP-GRE VPNs indiscriminately.
============================================================================= Eric Germann Computer and Communications Technologies ekgermann@cctec.com Van Wert, OH 45891 Phone: 419 968 2640 http://www.cctec.com Fax: 419 968 2641 Network Design, Connectivity & System Integration Services A Microsoft Solution Provider "Linux.. the choice of a gnutered generation." - brad@poofy.tbn.tm
participants (4)
-
C. Harald Koch -
Eric Germann -
John Hawkinson -
Paul G. Donner