subscribe to our Youtube


14455 questions

17168 answers


0 members

We are migrating to our new platform at Moving forward, you can continue discussions on this new platform. This current platform will be temporarily maintained for reference purposes.
0 votes
232 views 3 comments
by anonymous

I've just started to exercise with data transfer channel consisting of:

- PC with static IP:

- RUTX11 configured as SPOKE according the article

  (Router B - SPOKE - LAN IP:192168.1.1/24 - GRE:

- RUTX11 configured as HUB according the same article

  (Router A - HUB - LAN IP: - GRE:

- PC with static IP:

Both RUTX11 have RUTX_R_00.07.02.2, both are used as GSM/LTE routers - HUB router has static WAN Ip

Configuration test for both routers seems to be OK - routes exists.

There is an entry in SPOKE routes table and in HUB routes table one can see entry

Pings from address to,, are OK

Pings from address to,, are OK too.

However there is no connection  between PC's

Pings from to and are negative

Pings from to and are negative too.

Any guidelines how to fix it?

1 Answer

0 votes
by anonymous

Have you tried to check if disabling firewall in your PCs help?

Best regards,
by anonymous
Hi again,

I disabled the firewall in both PCs before starting the testing tunnel.

Both RUTX11 were reset to factory settings at the beginning. Then start setup including APNs and LAN addresses has been done. Then DMVPN setup for HUB and SPOKE has been performed. No additional, manually entered settings (concerning - for example - both RUTX11 firewalls or static routes). I've assumed that the Teltonika procedure (described in the article, is all to be done to achieve a working tunnel (working means able to be pinged successfully from any end of the tunnel).

Best regards
by anonymous
Could you explain if the procedure (described in the article allow and gives finally the possibility to ping successfully, a computer on each end of the tunnel? In other words - can user expect that all needed routes are automatically written to the routing tables? Or is this the user responsibility to enter manually routes needed to connect PCs on each end of the tunnel. I'm asking this way because all I've been able to achieve was a successful ping from the PC at the one end of the tunnel to the GRE address on the opposite end of the tunnel. Successful pinging of the PCs was only possible after manual insertion of lacking routes (it seems to be something against the concept of DMVPN in my opinion).
Best regards
by anonymous

RUTX11 - BGP configuration for Spoke 

According to information given here:, field BGP router ID (field numb 5) should be the HUB GRE Tunnel IP, field Network (field numb 6) should be the HUB LAN network IP with subnet mask. 

Is this correct? 

Why does Spoke advertise (to HUB) HUB's data instead of its own LAN IP and LAN Network? 

Let compare it with routers RUT9xx Spoke BGP configuration (see 

Configuring procedure - step: Network > Routing > Dynamic Routes > BGP 

Maintained part of BGP configuration for routers RUT9xx is different than for RUTX11 

                                                                                            RUT9xx (Config Step 2)      RUTX11 (Config Step 3) 

Spoke config: BGP, configure BGP instance: BGP router ID -----> Spoke LAN IP                    HUB GRE Tunnel IP 

Spoke config: BGP, configure BGP instance: Network ------------> Spoke LAN Network           HUB LAN network IP with subnet mask) 

Which way of BGP configuring is correct? 

This one for RUT9xx or this for RUTX11? Both are correct? Routers firmware performs in different way for these two routers types? 

Please explain.