Skip to main content
Version: 7.26

gre6


interface/gre6​

Type: Directory

Generic Routing Encapsulation (GRE) is a tunneling protocol originally developed by Cisco to encapsulate a wide variety of network layer protocols over an IP network.

FlagNameDescription
Xdisableddisabled
Rrunningrunning
ArgumentTypeDescription
namestringName of the tunnel.
mtunumLayer3 maximum transmission unit of the tunnel. Default: auto — the router subtracts the 44-byte GRE/IPv6 overhead from the outgoing interface MTU (actual-mtu is 1456 on a 1500-byte interface).
local-addressip6AddrIPV6 address used for the local tunnel end.
remote-address ( mandatory )address (flags=6Dvi)IPV6 address of the remote tunnel end.
keepalivesuper { keepalive-interval: time [1 .. ] , [keepalive-retries] [ ,num [1 .. ]] }

The keepalive parameter sets how often the router checks the remote end of the tunnel: the router sends GRE echo probes to the remote end every KeepaliveInterval seconds, repeated up to KeepaliveRetries times. The minimum interval is 1 second and a 0-second setting is rejected; unsetting keepalive turns it off, but on current RouterOS that does not change the running-flag behavior. By default keepalive is set to 10 seconds and 10 retries. On current RouterOS the tunnel keeps the running flag while it is enabled, even when the remote end stops answering; the tunneled traffic is then dropped until the remote end responds again.
Parameters are written in the following format: KeepaliveInterval,KeepaliveRetries
where KeepaliveInterval is the time interval and KeepaliveRetries is the number of retry attempts.

dscpnumDSCP value of the packet. Inherited means the DSCP value is inherited from the tunneled traffic.
clamp-tcp-mssboolControls whether to change the MSS size for received TCP SYN packets. When enabled, the router changes the MSS size for received TCP SYN packets if the current MSS size exceeds the tunnel interface MTU (taking into account the TCP/IP overhead). The received encapsulated packet still contains the original MSS, and only after decapsulation the MSS is changed.
dont-fragmentbool

Whether to include the DF bit in related packets. Default: no — yes is rejected on RouterOS 7, only no and inherit are valid.

  • no - fragment if needed.
  • inherit - use the DF flag of the original packet.
ipsec-secret (syscap=security)stringWhen a secret is specified, the router adds a dynamic IPsec peer to remote-address with a pre-shared key and policy (by default phase2 uses sha1/aes128cbc).
Read-only ArgumentTypeDescription
actual-mtunumActual maximum transmission unit of the tunnel.
current-remote-addressip6AddrCurrent IPv6 address of the remote end.