From owner-freebsd-net@FreeBSD.ORG Wed Aug 27 20:54:40 2003 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 5865F16A4ED for ; Wed, 27 Aug 2003 20:54:40 -0700 (PDT) Received: from smtp.nap.net.id (dns3.nap.net.id [202.59.163.3]) by mx1.FreeBSD.org (Postfix) with ESMTP id 03DC843F3F for ; Wed, 27 Aug 2003 20:54:37 -0700 (PDT) (envelope-from hilman@nap.net.id) Received: from hilman (didyma.nap.net.id [202.59.163.78]) by smtp.nap.net.id (8.12.6/8.11.3) with SMTP id h7S4AkCl057536 for ; Thu, 28 Aug 2003 11:10:53 +0700 (JAVT) (envelope-from hilman@nap.net.id) From: hilman firmansyah Message-ID: <078d01c36d18$ec90ef70$4ea33bca@hilman> To: References: Date: Thu, 28 Aug 2003 11:00:24 +0700 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2800.1158 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2800.1165 Subject: Re: Gif IPTunnel networkA-to-networkB not work X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 28 Aug 2003 03:54:40 -0000 Hi, I found the problem in : sysctl -w net.inet.ip.forwarding=1 After i fix the problem the routes works fine. But then I know the VPN solutions is not the answer for the questions since lately I know that in real fact the 2 networks I try to connected is a Collide network ! The clients in A side and the servers in B side. A and B is different office in one city, connected via fiber optic in vlan1 ( cant move to other vlan ) that used by many corporate office in same time. [ Client ] -----[ fbsd A ]---------------------[ fbsd B]-------[ Server ]-------- Intrnet 10.0.0.0 |____ fiberoptic__________| 10.0.0.1 Is there any solutions with freebsd to make a Possible to encrypt the packet from fbsd A to fbsd B in transparent / bridging mode , So not internal data visible to other company network in same fiberoptic. regards, nb: I m still trying with IPSEC to make possible but the literatures always said the vpn working on different internal networks subnets ------------------------snip -------------------------------------------- > > It is not a good idea to use gifs in parallel with IPsec tunnel mode., > > to do this routing trick. > > Fully agreed. The point is that a lot of documents on the web advise > to set up a gif tunnel in order to set up a IPSec tunnel. Which > is essentially nonsense. Apparently the original poster fell into the > same trap. Hence my clarification. > > Helge ----------------------------snip ------------------------------------------- -