From owner-freebsd-questions@FreeBSD.ORG  Thu Jul  8 14:59:47 2010
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 24A391065780
	for <freebsd-questions@freebsd.org>;
	Thu,  8 Jul 2010 14:59:47 +0000 (UTC)
	(envelope-from steve@ipv6canada.com)
Received: from smtp.ibctech.ca (v6.ibctech.ca [IPv6:2607:f118::b6])
	by mx1.freebsd.org (Postfix) with SMTP id 944708FC08
	for <freebsd-questions@freebsd.org>;
	Thu,  8 Jul 2010 14:59:46 +0000 (UTC)
Received: (qmail 33043 invoked by uid 89); 8 Jul 2010 15:01:31 -0000
Received: from unknown (HELO ?IPv6:2607:f118::5?)
	(steve@ibctech.ca@2607:f118::5)
	by 2607:f118::b6 with ESMTPA; 8 Jul 2010 15:01:31 -0000
Message-ID: <4C35E7F1.9040707@ipv6canada.com>
Date: Thu, 08 Jul 2010 11:00:01 -0400
From: Steve Bertrand <steve@ipv6canada.com>
User-Agent: Mozilla/5.0 (Windows; U; Windows NT 5.1; en-US;
	rv:1.9.1.7) Gecko/20100111 Lightning/1.0b1 Thunderbird/3.0.1
MIME-Version: 1.0
To: =?ISO-8859-1?Q?Matheus_Weber_da_Concei=E7=E3o?=
 <matheuswcon@gmail.com>
References: <AANLkTikffXjLu2QTENeRiQ7PhFLrC3Viiar_1BZOQAeP@mail.gmail.com>	<4C35D11D.4000304@ipv6canada.com>	<AANLkTil1YgXzpTBaQ0_X38oGhPfQWMpLMyKfRCOeY3x_@mail.gmail.com>	<4C35E607.2090902@ipv6canada.com>
	<4C35E697.7050006@ipv6canada.com>
In-Reply-To: <4C35E697.7050006@ipv6canada.com>
X-Enigmail-Version: 1.0.1
Content-Type: text/plain; charset=ISO-8859-1
Content-Transfer-Encoding: 8bit
Cc: freebsd-questions@freebsd.org
Subject: Re: VPN IPsec Help
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Thu, 08 Jul 2010 14:59:47 -0000

On 2010.07.08 10:54, Steve Bertrand wrote:
> On 2010.07.08 10:51, Steve Bertrand wrote:
>> On 2010.07.08 10:00, Matheus Weber da Conceição wrote:
>>>> It has been a long time since I've done IPSec on FBSD, but I'm willing
>>>> to bet that this has to do with routing, possibly amongst other things.
>>>> On peer 'B' (FBSD box), what internal IP range are you trying to access
>>>> the A network from...the same ones (ie. are you trying to bridge the
>>>> networks)?
>>>>
>>> The -peer A- doesn't need to access any -peer B- networks.
>>>
>>>> Do you have access to the Cisco gear?
>>> No.
>>>
>>>> If so, on FreeBSD, post the output of:
>>>>
>>>> % netstat -rn
>>>
>>> Notes:
>>> tun0 is my ppp pseudo-device
>>> tun5 is my openvpn tunel (192.168.5.0/24)
>>> ============
>>> # netstat -rn
>>> Routing tables
>>
>> [ big snip ]
>>
>> IIRC, you don't need a gre tunnel through IPSec,

...and, I meant to say gif interface, not gre tunnel.

Steve