eoip
interface/eoip
Type: Directory
Ethernet over IP (EoIP) Tunneling is a MikroTik RouterOS protocol designed to create an Ethernet tunnel between two routers over an IP network.
| Flag | Name | Description |
|---|---|---|
| X | disabled | Whether an item is disabled. |
| R | running | Whether the interface is running. |
| Argument | Type | Description |
|---|---|---|
| name | string | Interface name. |
| mtu | num | Layer3 maximum transmission unit. Default: auto — the router subtracts the 42-byte EoIP/IPv4 overhead from the path MTU (actual-mtu is 1458 on a 1500-byte path). |
| mac-address | macAddr | Media Access Control number of an interface. Any value is accepted; the auto-generated address is a locally administered one. IANA allows free use of the range from 00:00:5E:80:00:00 to 00:00:5E:FF:FF:FF (private unicast). |
| local-address | ipAddr | Source address of the tunnel packets, local to the router. Default 0.0.0.0 — the address of the interface used to reach the remote end. |
| remote-address ( mandatory ) | address (flags=4Dv) | IP address of the remote end of the EoIP tunnel. |
| tunnel-id ( mandatory ) | num | Unique tunnel identifier, which must match the other side of the tunnel. |
| keepalive | super { keepalive-interval: time [1 .. ] , [keepalive-retries] [ ,num [1 .. ]] } | The router removes the interface running flag when the remote end does not answer for |
| dscp | num | DSCP value of the packet. Inherited means the DSCP value is inherited from the packet to be encapsulated. |
| clamp-tcp-mss | bool | Controls whether to change MSS size for received TCP SYN packets. When enabled, the router changes the MSS size for received TCP SYN packets if the current MSS size exceeds the tunnel interface MTU (taking into account the TCP/IP overhead). The received encapsulated packet still contains the original MSS, and only after decapsulation the MSS is changed. |
| dont-fragment | bool | Whether to include the DF bit in related packets. Default:
|
| ipsec-secret (syscap=security) | string | When a secret is specified, the router adds a dynamic IPsec peer to remote-address with a pre-shared key and policy (by default phase2 uses sha1/aes128cbc). IPsec and fast path are mutually exclusive — allow-fast-path must be set to no. |
| allow-fast-path | bool | Whether to allow FastPath processing. Must be disabled if IPsec tunneling is used. |
| arp | enum (disabled | enabled | proxy-arp | reply-only | local-proxy-arp) { disabled:0, enabled:1, proxy-arp:2, reply-only:3, local-proxy-arp:4 } | Address Resolution Protocol mode. |
| arp-timeout | alt { arp-timeout: enum (auto) { auto:0 } , arp-timeout: time } | Time interval in which ARP entries time out. |
| arp-accept | bool | Whether to accept gratuitous ARP replies. |
| loop-protect | enum (default | off | on) { default:0, off:1, on:2 } | Enables or disables loop protect on the selected interface. default works as turned off. |
| loop-protect-send-interval | time | Sets how often loop protect packets are sent on the selected interface. |
| loop-protect-disable-time | time | Sets how long the selected interface is disabled when a loop is detected. |
| Read-only Argument | Type | Description |
|---|---|---|
| actual-mtu | num | Actual maximum transmission unit of the tunnel. |
| l2mtu | num | Layer2 maximum transmission unit. Not configurable for EoIP; reports 65535. |
| current-remote-address | ipAddr | Current IPv4 address of the remote end. |
| loop-protect-status | enum (off | on | disabled) { off:1, on:2, disabled:3 } | Loop protection status:
|