From owner-freebsd-security  Fri Sep 24 16:16:25 1999
Delivered-To: freebsd-security@freebsd.org
Received: from bubba.whistle.com (bubba.whistle.com [207.76.205.7])
	by hub.freebsd.org (Postfix) with ESMTP id 909FC1505A
	for <freebsd-security@FreeBSD.ORG>; Fri, 24 Sep 1999 16:16:22 -0700 (PDT)
	(envelope-from archie@whistle.com)
Received: (from archie@localhost)
	by bubba.whistle.com (8.9.2/8.9.2) id QAA55073;
	Fri, 24 Sep 1999 16:14:55 -0700 (PDT)
From: Archie Cobbs <archie@whistle.com>
Message-Id: <199909242314.QAA55073@bubba.whistle.com>
Subject: Re: skip and vpn
In-Reply-To: <01BF06EA.77C24EC0@kantoor-1.tepucom.nl> from "Theo Purmer (Tepucom)" at "Sep 25, 1999 00:11:07 am"
To: theo@tepucom.nl (Theo Purmer (Tepucom))
Date: Fri, 24 Sep 1999 16:14:55 -0700 (PDT)
Cc: freebsd-security@FreeBSD.ORG ('freebsd-security@FreeBSD.ORG')
X-Mailer: ELM [version 2.4ME+ PL54 (25)]
MIME-Version: 1.0
Content-Type: text/plain; charset=US-ASCII
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

Theo Purmer (Tepucom) writes:
> got a problem here with skip and a vpn
> 
> ive got two gateways running ipf, ipnat and skip.
> it all works the gateways are on the internet...(far apart)
> 
> on the inside of the gateways im using rfc1918
> networks. I want to be able to go from one internal
> network via the vpn (using skip for encryption) to
> the other internal network.
> 
> but i cannot just set up a route for the other internal
> network using the other skip gateway. I then get arp
> errors cuz it wants the other gateway to be on his
> subnet

Are the local and remote rfc1918 network ranges disjoint?
If not they must be.

-Archie

___________________________________________________________________________
Archie Cobbs   *   Whistle Communications, Inc.  *   http://www.whistle.com


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message