From owner-freebsd-security Mon Feb 11 18:30:52 2002 Delivered-To: freebsd-security@freebsd.org Received: from newman2.bestweb.net (newman2.bestweb.net [209.94.102.67]) by hub.freebsd.org (Postfix) with ESMTP id BE38C37B645 for ; Mon, 11 Feb 2002 18:19:02 -0800 (PST) Received: from okeeffe.bestweb.net (okeefe.bestweb.net [209.94.100.110]) by newman2.bestweb.net (Postfix) with ESMTP id 58346232CA for ; Mon, 11 Feb 2002 21:17:58 -0500 (EST) Received: by okeeffe.bestweb.net (Postfix, from userid 0) id EED059F3AE; Mon, 11 Feb 2002 21:12:39 -0500 (EST) From: Jim Durham Reply-To: durham@jcdurham.com To: freebsd-security@freebsd.org Subject: IPSEC and gif interface after 4.4 Date: Sun, 10 Feb 2002 16:01:00 -0500 Message-Id: <20020212021239.EED059F3AE@okeeffe.bestweb.net> Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org I pass this along to save someone else some head-banging like I did. I missed this in the 4.4 release notes: "Network device cloning has been implemented, and the gif(4) device has been modified to take advantage of it. Thus, instead of specifying how many gif(4) interfaces are available in kernel configuration files, ifconfig(8)'s create option should be used when another device instance is desired." IPSEC uses a gif interface. I couldn't imagine why it wasn't there on my 4.4 systems. 'ifconfig gif0 create' makes it happen. Duh... -Jim To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message