From owner-freebsd-net Wed Mar 20 16:45:49 2002 Delivered-To: freebsd-net@freebsd.org Received: from studsboll.d2g.com (a63.flamman.student.liu.se [130.236.218.63]) by hub.freebsd.org (Postfix) with ESMTP id 884B837B400 for ; Wed, 20 Mar 2002 16:45:44 -0800 (PST) Received: from studsboll.realworld.nu (localhost [127.0.0.1]) by studsboll.d2g.com (8.11.6/8.11.6) with SMTP id g2L0jPS14556; Thu, 21 Mar 2002 01:45:25 +0100 (CET) (envelope-from doktorn@realworld.nu) Date: Thu, 21 Mar 2002 01:45:24 +0100 From: Rickard Borgmäster To: Lars Eggert Cc: freebsd-net@freebsd.org Subject: Re: IPSec tunnel FreeBSD<->OpenBSD using isakmp Message-Id: <20020321014524.667eab66.doktorn@realworld.nu> In-Reply-To: <3C9910B6.2090005@isi.edu> References: <20020320205735.0851b080.doktorn@realworld.nu> <3C98EF33.6090207@isi.edu> <20020320231802.222a8dd2.doktorn@realworld.nu> <3C9910B6.2090005@isi.edu> X-Mailer: Sylpheed version 0.7.2 (GTK+ 1.2.10; i386-portbld-freebsd4.5) Mime-Version: 1.0 Content-Type: text/plain; charset=ISO-8859-1 Content-Transfer-Encoding: 8bit Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org On Wed, 20 Mar 2002 14:44:06 -0800 Lars Eggert hit the keyboard and punched: > No, there is an (older) KAME included in FreeBSD; however that one > doesn't yet represent SAs in the routing table as interfaces. I still do not understand wether I need KAME or not? What would it gain to install KAME? > Sorry for being unclear: You miss a route entry (on the FreeBSD box, > e.g.) that tells it to forward 10/24 to the OpenBSD box. You can't have > such a route, because the SA that connects the two isn't represented in > the routing table (it's a packet filter). One thing that pops up in my head is, "what if I had an interface in the 10.0.0.0/24 net?". Therefore, I am right now recompiling my kernel to include 2 loopback interfaces. Then I will set a 10.0.0.x address to it and we'll se what happens =) What do you think? -- Rickard .--. .--. .----------------------------------------. | | | | .-. | Rickard Borgmäster | | | | |/ / | doktorn@sub.nu | .-^ | .--. | < | http://doktorn.sub.nu/ | ( o | ( () ) | |\ \ `----------------------------------------' `-----' `--' `--' `--' To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message