LinuxQuestions.org
Share your knowledge at the LQ Wiki.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices



Reply
 
Search this Thread
Old 05-17-2003, 04:41 PM   #1
antken
Member
 
Registered: Nov 2000
Location: england
Distribution: latest Mandrake
Posts: 368

Rep: Reputation: 30
gre ip tunnels and their security


hello,

i have just learned how to create a tunnel over the internet using gre to one of my linux boxes. however all this is well and good but what about security?

how secure are these gre tunnels and is it safe to leave it connected all the time?

+ what are your opinions on this topic?

thanks
antken
 
Old 09-20-2003, 12:27 PM   #2
elavalle
LQ Newbie
 
Registered: Sep 2003
Location: mexico
Distribution: red hat 8.0
Posts: 11

Rep: Reputation: 0
GRE tunnel are not encrypted... so they are not secure at all. for security I'd recommend you encrypt these via ipsec or pptp.
 
Old 09-20-2003, 12:28 PM   #3
elavalle
LQ Newbie
 
Registered: Sep 2003
Location: mexico
Distribution: red hat 8.0
Posts: 11

Rep: Reputation: 0
by the way??? may seem stupid but how do you create a gre tunnel in linux. I have only created them under cisco routers...
 
Old 09-20-2003, 12:42 PM   #4
antken
Member
 
Registered: Nov 2000
Location: england
Distribution: latest Mandrake
Posts: 368

Original Poster
Rep: Reputation: 30
hi,

thanks for that, it kind of figures they are un encrypted, i was at one point going to use this as a solution to a problem but oh well

i found the tutorial on the advanced routing how to at tldp.org ( if you go its called Linux Advanced Routing & Traffic Control HOWTO and its written by a load of people )

just one question then, if GRE is unencrypted why do people use it on cisco systems ( i.e. routers, firewalls and switches ), would it not be better to use an encrypted tunnel?
 
Old 09-22-2003, 04:18 PM   #5
elavalle
LQ Newbie
 
Registered: Sep 2003
Location: mexico
Distribution: red hat 8.0
Posts: 11

Rep: Reputation: 0
Smile

depending on the type of traffic you will pass through... It would have less over head and could also be run on a private network (for routing issues) not only it has to travel across the internet...
 
Old 09-22-2003, 05:08 PM   #6
hakcenter
Member
 
Registered: Apr 2003
Location: Not to far from the computer screen
Distribution: RedHat 9.0
Posts: 324

Rep: Reputation: 30
www.freeswan.com

^^ vpn / ipsec

Its pretty damn reliable. RSA keys are nice
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Vpn poptop - CTRL: PTY read or GRE write failed (pty,gre)=(5,6) dezeque Linux - Networking 8 12-11-2009 02:56 PM
GRE keepalives. How can a SUSE 9.0 Linux box send GRE keepalives? dlef Linux - Networking 1 06-28-2005 01:00 PM
Mindterm tunnels treotan Linux - Software 0 04-26-2005 04:06 AM
NAT over tunnels sqn Linux - Networking 2 03-18-2005 02:08 AM
Automatic SSH Tunnels fearofcarpet Linux - Software 1 12-05-2003 12:36 AM


All times are GMT -5. The time now is 07:46 PM.

Main Menu
Advertisement
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration