From owner-freebsd-questions@FreeBSD.ORG Wed Sep 29 13:11:32 2010 Return-Path: Delivered-To: freebsd-questions@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 9F0B01065672 for ; Wed, 29 Sep 2010 13:11:32 +0000 (UTC) (envelope-from claudiu.vasadi@gmail.com) Received: from mail-ww0-f50.google.com (mail-ww0-f50.google.com [74.125.82.50]) by mx1.freebsd.org (Postfix) with ESMTP id 37DAD8FC0C for ; Wed, 29 Sep 2010 13:11:31 +0000 (UTC) Received: by wwb17 with SMTP id 17so963370wwb.31 for ; Wed, 29 Sep 2010 06:11:31 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:mime-version:received:received:date:message-id :subject:from:to:content-type; bh=K8o+S/DTHUTuJVacLlOsiagM/BdG5uQMvlo+wAHbfow=; b=EPfzKor96uWuTwvGwgGBFAD+UBF7bDji2U8AAcIgXW5y5cXSYy9tWthUnoSuwylbXC 0rPMGV4zTkO+0gWkRfq9bdFKnihxphge9iBTbsdPzggwIHd6aR6bVTST7PHSawTFhagy ir/iJeFAWaOChd6FGcwsaGFG1T2IsjIqwEs/E= DomainKey-Signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=mime-version:date:message-id:subject:from:to:content-type; b=FIlmkrBHqa0LLtu+JImXoeOXPgqWASfYVYrgk74Ia2WGKxsCRv1416yYqepjlqnfAB Aiabm+mBqAUu+eJcYwvZZDS8+PhvqYjlb/70GM+VMep920vE3rT1x/gVm8SJ5e1yufYM VwNYbks8Ehbg1h1QIPxxld7xoLJNnGA8sDgLI= MIME-Version: 1.0 Received: by 10.216.47.80 with SMTP id s58mr1434469web.15.1285765891044; Wed, 29 Sep 2010 06:11:31 -0700 (PDT) Received: by 10.216.38.129 with HTTP; Wed, 29 Sep 2010 06:11:30 -0700 (PDT) Date: Wed, 29 Sep 2010 15:11:30 +0200 Message-ID: From: claudiu vasadi To: FreeBSD Content-Type: text/plain; charset=ISO-8859-1 X-Content-Filtered-By: Mailman/MimeDel 2.1.5 Subject: ipsec with dynamic IP X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 29 Sep 2010 13:11:32 -0000 Hello fellas, I have 2x 8.1-RELEASE machines and I need to create a vpn between them. I've been reading the handbook on this subject and following the example there, I was able to establish a link. The only problem is that both my machines have dynamic (external) IP. My way of "solving" this little issue would be to create a script that would check each machine for a new external IP and if it finds it, replace it wherever it is needed (gif interface, racoon conf. file) My question to you is if there is another, cleaner, way of achieving this and if any of you faced the same situation, how did you come to solve it ? Also, is there a way to make the gif interface persistent over reboots ? I couldn;t find any so again, a script comes to mind. -- Best regards, Claudiu Vasadi