Article ID: 115726, created on Mar 14, 2013, last review on May 9, 2014

  • Applies to:
  • Virtuozzo containers for Linux


It is needed to configure tunneling module for container. It can be configured with the following steps:
  1. Check your kernel and tools version. Kernel should be at least 2.6.18-028stab070.14, and tools should be TU-4.0.0-221 or later:
    [root@pvc ~]# uname -r
    [root@pvc ~]# vzctl --version
    vzctl v.4.0.0-221
  2. Add this feature to a container:
    [root@pvc ~]# vzctl set CTID --save --features "ipip:on"
  3. Ensure the module is loaded on the hardware node:
    [root@pvc ~]# modprobe ipip
  4. Restart the container:
    [root@pvc ~]#vzctl restart CTID
  5. Configure IPIP tunnel in container using the container's IP address and the remote IP address:
    [root@pvc ~]# vzctl exec CTID ip tunnel add ipip0 mode ipip remote local
  6. Add an IP address with the mask to the tunnel: 
    [root@pvc ~]# vzctl exec CTID "ip link set up ipip0; ip addr add dev ipip0"
  7. Configure the similar or revers configuration on the remote side.

Please note, that this encapsulation needs the certain IP protocols to be allowed between hosts:
ipencap 4       IP-ENCAP        # IP encapsulated in IP (officially ``IP'')
ipip    94      IPIP            # Yet Another IP encapsulation
encap   98      ENCAP           # Yet Another IP encapsulation

d02f9caf3e11b191a38179103495106f 2897d76d56d2010f4e3a28f864d69223 e8e50b42231236b82df27684e7ec0beb

Email subscription for changes to this article
Save as PDF