Mozhesh da napravish i taka:
sheipni si dvata interfeisa kato im zadavash max skorost kakvato pozhelaesh,
no im slozhi razlichni prioriteti. Sheipni i vunshniia interfeis kato zadadesh razlichni prioriteti na queue-tata za trafica idvassht ot razlichnite vutreshni interfeisi.

tun1 - ime na ipip tunela na comp A
eth0 na A: 192.168.100.1/24
tun1: 172.16.20.1/24

A:
iptables -A INPUT -s 192.168.100.2 -d 192.168.100.1 -j ACCEPT
iptables -A INPUT -i tun1 -j ACCEPT

iptables -A FORWARD -i tun1 -j ACCEPT
iptables -A FORWARD -o tun1 -j ACCEPT

iptables -A OUTPUT -s 192.168.100.1 -d 192.168.100.2 -j ACCEPT
iptables -A OUTPUT -o tun1 -j ACCEPT

tun2 - ime na ipip tunela na comp B
eth0 na B:  192.168.100.2/24
tun2: 172.16.20.2/24
B:
iptables -A INPUT -s 192.168.100.1 -d 192.168.100.2 -j ACCEPT
iptables -A INPUT -i tun2 -j ACCEPT

iptables -A FORWARD -i tun2 -j ACCEPT
iptables -A FORWARD -o tun2 -j ACCEPT

iptables -A OUTPUT -s 192.168.100.2 -d 192.168.100.1 -j ACCEPT
iptables -A OUTPUT -o tun2 -j ACCEPT

Tova e v nai-prost variant conf-a na firewalla, ot koito pochnah ama do nikude ne stignah.

Mersi.

Zdraveite,
Iskam da pitam neshto. Imam ip-over-ip tunel mezhdu dve mashini. Toi raboti perfektno. Samo che ne moga da pusna firewall. Polzvam Slackware 10.2(kernel 2.6.14.3). Kak izglezhda:
       A ---------------------------------------------------B
xxx.xxx.xxx.xxx                                       yyy.yyy.yyy.yyy

Na A sum pusnal vsichko ot i kum yyy.yyy.yyy.yyy, a na B - vsichko ot i kum xxx.xxx.xxx.xxx. Osven tova sum pusna i vhodiashti i izhodiashti vruzki  
kum i ot ipip interfeisite. No vupreki tova tunela ne raboti. Ima li niakoi ideia zashto tunela ne raboti. Bez firewall raboti a s firewall - ne.

Blagodaria predvaritelno.