Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 26 Mar 2019 19:38:11 +0700
From:      Eugene Grosbein <eugen@grosbein.net>
To:        "Eugene M. Zheganin" <emz@norma.perm.ru>, "freebsd-stable@freebsd.org Mailing FreeBSD-STABLE" <freebsd-stable@freebsd.org>
Subject:   Re: ipsec/gif(4) tunnel not working: traffic not appearing on the gif(4) interface after deciphering
Message-ID:  <48c5513a-4357-777e-73b3-d09a4e77c931@grosbein.net>
In-Reply-To: <30327deb-2d28-90e2-6069-0706f4ea5eee@norma.perm.ru>
References:  <30327deb-2d28-90e2-6069-0706f4ea5eee@norma.perm.ru>

next in thread | previous in thread | raw e-mail | index | archive | help
26.03.2019 14:26, Eugene M. Zheganin wrote:

> I have a FreeBSD 11.1 box with 2 public IPs that has two tunnels to another FreeBSD box with 1 public IP. One of these tunnels is working, the other isn't. Long story short: I have some experience in ipsec tunnels setup. and I supposed that have configured everything properly, and to illustrate this I've loaded if_enc(4) on the 11.1 and it does show the traffic for the second gif:

[skip]

> Any ideas ?

Always add "link2" to ifconfig_gifX configuration in such cases:

ifconfig_gif0="inet 192.168.254.25 192.168.254.26 netmask 255.255.255.252 mtu 1500 link2"

Refer to gif(4) manual page for details, look for IFF_LINK2 description.




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?48c5513a-4357-777e-73b3-d09a4e77c931>