Fun with EoIP Mike Everest, DuxTel Pty Ltd

Fun with EoIP Mike Everest, DuxTel Pty Ltd Ethernet over IP not just another GRE tunnel!

Transparent layer2 transport Presents as a virtual Interface to RouterOS Carries Ethernet frames Can bridge it Can route it Can firewall filter it NAT it Queue it

Bond it Ethernet over IP some limitations! requires routable path (avoid NAT!) proprietary MikroTik (?) watch out for MTU on carrier network

only(!) 65536 unique tunnels Ethernet over IP easy to implement! Router A remote-address (IP of Router B) tunnel-id (0 255) Router B remote-address (IP of Router A) tunnel-id (matches other end) Example 1

Connect to Remote Hotspot Example 1 Internet Gateways Ethernet over IP Hotspots on Layer2 WAN Example 1 HotSpots use pppoe Example 1 Remote/Mobile hotspots connect using pptp

Example 1 Concept: create EoIP tunnel across ppp Example 1 Concept: bridge local wlan to remote HS Remote Router Local Router wlan1 wlan1

HS bridge eth1 internet eoip HS bridge eth1 internet

Example 1 Concept: bridge local wlan to remote HS Remote Router Local Router wlan1 wlan1 HS bridge eoip

EoIP bridge HS bridge eth1 internet eth1 internet Example 1: Demo Example 2

the weakest link lo o c d u clo ISP ! T

S A F internet ! T S A F ! P

A R C N LA ! T S A F

! T S A F Example 2 the pipe dream lo o c

d u clo ISP internet N LA Example 2 load balanced uplinks

lo o c d u clo ISP internet N LA

Example 2 limited to one link per stream lo o c d u clo ISP

internet N LA Example 2 EoIP to the rescue! internet ISP N

LA Example 2 set out the groundwork pppoe-out1 internet pppoe-out2 ISP N LA

Example 2 lay in the tunnels internet ISP N LA Example 2 force traffic path

10.10.1.1 10.10.1.2 10.100.1.2 10.100.1.2 internet ISP /ip route add dst-address=10.10.1.1/32 gateway=pppoe-out1

/ip route add dst-address=10.10.1.2/32 gateway=pppoe-out2 N LA Example 2 force traffic path 10.10.1.1 10.10.1.2 10.100.1.1

10.100.1.2 internet ISP /int eoip add tunnel-id=1 remote=10.10.1.1 local=10.100.1.1 /int eoip add tunnel-id=2 remote=10.10.1.1 local=10.100.1.2 N LA

Example 2 bond them! internet ISP N LA Example 2 a single virtual aggregate link!

internet ISP N LA Example 2 a single virtual aggregate link! internet ISP

N LA Example 2 combined bandwidth per stream! internet ISP N LA

More resources About DuxTel: MikroTik Specialists since 2004 Widest range of MikroTik products and related components Free email support even if you didnt buy it from us! Contract and Project support 4 certified engineers available Free sample scripts for download from shop.mikrotik.com.au Supporter of talk.mikrotik.com.au (thanks too, Connectivity IT)