Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 28 Aug 2003 11:00:24 +0700
From:      hilman firmansyah <hilman@nap.net.id>
To:        <freebsd-net@freebsd.org>
Subject:   Re: Gif IPTunnel networkA-to-networkB not work
Message-ID:  <078d01c36d18$ec90ef70$4ea33bca@hilman>
References:  <D2CFC58E0F8CB443B54BE72201E8916E94C9E4@dehhx005.hbg.de.int.atosorigin.com>

next in thread | previous in thread | raw e-mail | index | archive | help
Hi,

I found the problem in :  sysctl -w net.inet.ip.forwarding=1
After i fix the problem the routes works fine.  But then I know the VPN
solutions is not the answer for the questions since lately I know that in
real fact the 2 networks I try to connected is a Collide network !

The clients in A side and the servers in B side. A and B is different office
in one city, connected via fiber optic in vlan1 ( cant move to other vlan )
that used by many corporate office in same time.


  [ Client ] -----[ fbsd A ]---------------------[ fbsd B]-------[
Server ]-------- Intrnet

10.0.0.0                      |____ fiberoptic__________|
10.0.0.1

Is there any solutions with freebsd to make a Possible to encrypt the packet
from fbsd A to fbsd B  in transparent / bridging mode , So not internal data
visible to other company network in same fiberoptic.

regards,

nb: I m still trying with IPSEC to make possible but the literatures always
said the vpn working on different internal networks subnets




------------------------snip --------------------------------------------
> > It is not a good idea to use gifs in parallel with IPsec tunnel mode.,
> > to do this routing trick.
>
> Fully agreed. The point is that a lot of documents on the web advise
> to set up a gif tunnel in order to set up a IPSec tunnel. Which
> is essentially nonsense. Apparently the original poster fell into the
> same trap. Hence my clarification.
>
> Helge
----------------------------snip -------------------------------------------
-



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?078d01c36d18$ec90ef70$4ea33bca>