Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 18 Jul 2000 13:36:57 -0700
From:      Joe Touch <touch@ISI.EDU>
To:        itojun@iijlab.net
Cc:        snap-users@kame.net, Lars Eggert <larse@ISI.EDU>, stable@freebsd.org, xbone@ISI.EDU, touch@ISI.EDU
Subject:   Re: (KAME-snap 2950) Re: KAME/FreeBSD-stable merge
Message-ID:  <3974BFE9.8789DB61@isi.edu>
References:  <17780.963892204@coconut.itojun.org>

next in thread | previous in thread | raw e-mail | index | archive | help


itojun@iijlab.net wrote:
> 
> >The current KAME code does not support multiple tunnels between two
> >hosts on a single interface. This restores that capability, which is
> >required for setting up different overlay networks which use the same
> >pairs of hosts.
> 
>         if you consider inbound packets, it does not make sense to have
>         multiple tunnel interfaces for the same pair of outer addresses .

There are two alternatives:

	#1- multiple tunnels with the same outer wrapper

	#2- aliases on a GIF

The analogy of #2 is ethernet with aliases; a single outer wrapper
(ethernet MAC address) on different inner IP src/dest pairs.

We note that it is feasible and possible to assign multiple ethernets
the same MAC address with different IP addresses, resulting in #1.

We are currently trying to determine if aliases suffice, and will post
our results when tests are complete. However, we consider aliases _much_
more of a 'hack' than generalizing the capability of GIF tunnels. 

Joe



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3974BFE9.8789DB61>