From owner-freebsd-stable  Thu Jan 13  6:15:31 2000
Delivered-To: freebsd-stable@freebsd.org
Received: from kot.ne.mediaone.net (kot.ne.mediaone.net [24.218.15.190])
	by hub.freebsd.org (Postfix) with ESMTP id 8D348156EC
	for <stable@freebsd.org>; Thu, 13 Jan 2000 06:15:21 -0800 (PST)
	(envelope-from mi@kot.ne.mediaone.net)
Received: from rtfm.newton (mi@rtfm.newton [10.10.0.1])
	by kot.ne.mediaone.net (8.9.3/8.9.1) with ESMTP id JAA41262;
	Thu, 13 Jan 2000 09:15:13 -0500 (EST)
From: Mikhail Teterin <mi@kot.ne.mediaone.net>
X-Relay-IP: 10.10.0.1
Received: (from mi@localhost)
	by rtfm.newton (8.9.3/8.9.3) id JAA05663;
	Thu, 13 Jan 2000 09:15:12 -0500 (EST)
	(envelope-from mi@kot.ne.mediaone.net)
Message-Id: <200001131415.JAA05663@rtfm.newton>
Subject: Re: IP Tunneling, is it possible?
In-Reply-To: <200001131159.DAA09342@netcom.com> from Stan Brown at "Jan 13, 2000
 06:59:24 am"
To: Stan Brown <stanb@netcom.com>
Date: Thu, 13 Jan 2000 09:15:12 -0500 (EST)
Cc: stable@freebsd.org
X-Face: %UW#n0|w>ydeGt/b@1-.UFP=K^~-:0f#O:D7w<gv/&E-lL7twZCT8B~/PA4|\t$ti+22K">
	 hJ5G_<5143Bb3kOIs9XpX+"V+~$adGP:J|SLieM31VIhqXeLBli"<kcG^EOVih
	 y+z3/UR{6SCQ
X-Mailer: ELM [version 2.4ME+ PL60 (25)]
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-stable@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

Stan Brown once stated:

= I have 2 physicaly seperate segments of the same subnet that I need to
= connect logicaly. I have a FreeBSD gateway/firewall machine on both of
= the subnets conected to the corporate network.

I love my  PPP over SSH connection. Basicly, ppp  on one machine invokes
ssh to login to the other side and start ``ppp -direct'' there. Once the
connection is up, both ends can  route packets to/from the newly created
tun-interfaces enabling other machines on the LANs to see it all.

This works perfect to get a normal connection through a one-way firewall
too, BTW.

	-mi

= Specificaly,  I   have  an   existing  network   170.85.106.*  netmask
= 255.255.255.128 which  connects to the corporate  170.85.113.* network
= this is then  is routed to 170.85.109.*  Now I have in  my office some
= more machines that I need to set up for the 170.85.106 net.
=
= Is there a way to encapsulate packets on the 2 parts of the 170.85.105
= network,  and  send them  to  the  other  part,  where they  would  be
= unencapsulated? I think this is  called IP Tunneling and Linux appears
= to support  it, but I would  rather not change the  2 gateway/firewall
= machines over to Linux, if I don't have to.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message