ipipv6
interface/ipipv6
Type: Directory
IPIP (IP-in-IP) is a simple tunneling protocol defined in RFC 2003 that encapsulates IP packets within another IP header to transport traffic between two endpoints.
| Flag | Name | Description |
|---|---|---|
| X | disabled | Whether an item is disabled. |
| R | running | Whether the interface is running. |
| Argument | Type | Description |
|---|---|---|
| name | string | Interface name. |
| mtu | num | Layer3 maximum transmission unit. |
| local-address | ip6Addr | IP address on the router used by the IPIP tunnel. |
| remote-address ( mandatory ) | address (flags=6Dvi) | IP address of the remote end of the IPIP tunnel. |
| keepalive | super { keepalive-interval: time [1 .. ] , [keepalive-retries] [ ,num [1 .. ]] } | The keepalive parameter sets the time interval in which the tunnel running flag remains even if the remote end of the tunnel goes down. If the configured time and retries fail, the interface running flag is removed. |
| dscp | num | DSCP value of the packet. Inherited means the DSCP value is inherited from the tunneled traffic. |
| clamp-tcp-mss | bool | Controls whether to change the MSS size for received TCP SYN packets. When enabled, the router changes the MSS size for received TCP SYN packets if the current MSS size exceeds the tunnel interface MTU (taking into account the TCP/IP overhead). The received encapsulated packet still contains the original MSS, and only after decapsulation the MSS is changed. |
| dont-fragment | bool | Whether to include the DF bit in related packets.
|
| ipsec-secret (syscap=security) | string | When a secret is specified, the router adds a dynamic IPsec peer to remote-address with a pre-shared key and policy (by default phase2 uses sha1/aes128cbc). |
| Read-only Argument | Type | Description |
|---|---|---|
| actual-mtu | num | Actual maximum transmission unit of the tunnel. |
| current-remote-address | ip6Addr | Current IP address of the remote end. |