From 54746d3618a5551a40e39260e209e73268b03359 Mon Sep 17 00:00:00 2001 From: =?UTF-8?q?Marek=20K=C3=BCthe?= Date: Mon, 2 Jan 2023 17:31:25 +0100 Subject: [PATCH] add sit docs MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit Signed-off-by: Marek Küthe --- docs/tunneling/index.md | 1 + docs/tunneling/{gre.md => iptunnel.md} | 14 ++++++++++---- 2 files changed, 11 insertions(+), 4 deletions(-) rename docs/tunneling/{gre.md => iptunnel.md} (76%) diff --git a/docs/tunneling/index.md b/docs/tunneling/index.md index 9150e6f..2b48962 100644 --- a/docs/tunneling/index.md +++ b/docs/tunneling/index.md @@ -3,3 +3,4 @@ - [fastd](fastd) - [WireGuard](wireguard) +- [IP tunnel](iptunnel) diff --git a/docs/tunneling/gre.md b/docs/tunneling/iptunnel.md similarity index 76% rename from docs/tunneling/gre.md rename to docs/tunneling/iptunnel.md index fc0e7bc..90539c3 100644 --- a/docs/tunneling/gre.md +++ b/docs/tunneling/iptunnel.md @@ -1,11 +1,13 @@ -# Generic Routing Encapsulation (GRE) +# IP tunnel -*Note:* GRE tunnels are unencrypted. +*Note:* IP tunnels (includes GRE, GRETAP and SIT) are unencrypted. + +## Generic Routing Encapsulation (GRE) GRE tunnels on layer 3 of the ISO/OSI model. -## Configuring with ip +### Configuring with ip To create a tunnel, you can use the following command: ``` @@ -32,7 +34,7 @@ ip addr add dev ``` Replace `` with your own link-local address. -### Automatic start with ifupdown +#### Automatic start with ifupdown If you want to start the GRE tunnel automatically, you can use an ifupdown template which is placed under `/etc/network/interfaces.d`: ``` @@ -54,3 +56,7 @@ ifdown ## GRETAP GRETAP tunnels operate on layer 2 of the ISO/OSI model. To use a GRETAP tunnel, you only have to change the mode: For IPv4 `gretap` and for IPv6 `ip6gretap`. + +## Simple Internet Transition (SIT) + +SIT tunnels can be created in the same way as GRE tunnels. The difference is that you write `type sit` instead of `type gre`. SIT tunnels are designed to encapsulate IPv6 packets, so a SIT tunnel must be established over IPv4.