From owner-freebsd-questions  Thu Nov  9 14:25:49 2000
Delivered-To: freebsd-questions@freebsd.org
Received: from mail.interware.hu (mail.interware.hu [195.70.32.130])
	by hub.freebsd.org (Postfix) with ESMTP
	id 3F14F37B479; Thu,  9 Nov 2000 14:25:41 -0800 (PST)
Received: from casablanca-42.budapest.interware.hu ([195.70.53.42] helo=elischer.org)
	by mail.interware.hu with esmtp (Exim 3.16 #1 (Debian))
	id 13u08I-00015o-00; Thu, 09 Nov 2000 23:25:23 +0100
Message-ID: <3A0B2436.EEC5188D@elischer.org>
Date: Thu, 09 Nov 2000 14:24:54 -0800
From: Julian Elischer <julian@elischer.org>
X-Mailer: Mozilla 4.7 [en] (X11; U; FreeBSD 5.0-CURRENT i386)
X-Accept-Language: en
MIME-Version: 1.0
To: Mike <mikey@kappaisle.com>
Cc: freebsd-questions@freebsd.org, freebsd-net@freebsd.org
Subject: Re: VPN over PPPoE
References: <Pine.BSF.4.21.0011091700570.49569-100000@greencreek.kappaisle.com>
Content-Type: text/plain; charset=iso-8859-15
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

Mike wrote:
> 
> Hi all,
> 
> Has anyone ever successfully configured VPN (using IPSec protocol) over
> PPPoE connection?  I have 1 VPN configured over 2 locations with T1
> connections without any problem (using the KAME IPSec on FreeBSD
> 4.1.1).  However, when I tried the same configuration with the 3rd
> location running DSL, it seems the IPSec packets can't reach out via tun0
> device.

how are the T1 lines connected?
more details on the pppoe connection might be good too..
do you used the netgraph pppoe or the user-land pppoe front-end?

ppp over pppoe uses a slightly reduced MTU
that may have something to do with it, but I doubt it..

have you tried ipsec over ppp  with a dialup connection (if you have
one)?
maybe it's the ppp program having an argument with ipsec?
(One for Brian really..)
(I presume the pppoe connection is otherwise working ok)..


> 
> I've searched through the FAQ and mailing lists, and seen people suggest
> "pipsecd" for VPN over PPPoE.  However, I do prefer using KAME IPSec for
> this type of implementation, and hope that someone can point me to some
> lights.
> 
> Thank you all!
> 
> Mike
> 
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-net" in the body of the message

-- 
      __--_|\  Julian Elischer
     /       \ julian@elischer.org
    (   OZ    ) World tour 2000
---> X_.---._/  presently in:  Budapest
            v


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message