Re: multilink VPN

2009-05-31 Thread Stuart Henderson
On 2009-05-31, Stuart Henderson wrote: >> Uhm. The tunnel endpoints and the gre src and dest IPs are the same. I >> have a bad feeling about that. > > ahh, changing that gets me a lot further, thanks. gre's nasty hack > to toggle the address's LSB isn't quite enough then; not a problem. > >> Addit

Re: multilink VPN

2009-05-31 Thread Stuart Henderson
On 2009-05-31, Claudio Jeker wrote: > On Sun, May 31, 2009 at 01:13:25PM +, Stuart Henderson wrote: >> On 2009-05-31, Stuart Henderson wrote: >> > On 2009-05-29, Stuart Henderson wrote: >> >> >> >> OSPF over gre's or gif's (which can then themselves be protected by >> >> ipsec) is probably t

Re: multilink VPN

2009-05-31 Thread Claudio Jeker
On Sun, May 31, 2009 at 01:13:25PM +, Stuart Henderson wrote: > On 2009-05-31, Stuart Henderson wrote: > > On 2009-05-29, Stuart Henderson wrote: > >> > >> OSPF over gre's or gif's (which can then themselves be protected by > >> ipsec) is probably the fastest option at present on OpenBSD. > >

Re: multilink VPN

2009-05-31 Thread Stuart Henderson
On 2009-05-31, Stuart Henderson wrote: > On 2009-05-29, Stuart Henderson wrote: >> >> OSPF over gre's or gif's (which can then themselves be protected by >> ipsec) is probably the fastest option at present on OpenBSD. > > Hrmm. And then I try it... > > Does anyone actually have this working and i

Re: multilink VPN

2009-05-31 Thread Stuart Henderson
On 2009-05-29, Stuart Henderson wrote: > > OSPF over gre's or gif's (which can then themselves be protected by > ipsec) is probably the fastest option at present on OpenBSD. Hrmm. And then I try it... Does anyone actually have this working and if so would they mind sharing config? I'm seeing the

Re: multilink VPN

2009-05-30 Thread Anathae Townsend
James Mackinnon wrote on Friday, May 29, 2009 6:25 PM > Hi All > > Thanks for your feedback. > > The guy regarding the cisco is a CCIE so I tend to accept his > statements > quick enough.. > > In VPN, I am referencing it in general terms in the creation of a > private > network over a public net

Re: multilink VPN

2009-05-29 Thread Jussi Peltola
In cisco speak, with pretty pictures: http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a00800a43f6.shtml On OpenBSD, it works analoguously, except that it's much cleaner :) Just think of the ipsec secured gre tunnel as a wire from point A to B. Make two such wire

Re: multilink VPN

2009-05-29 Thread James Mackinnon
ver to the second IP. fun little project, very small to almost nil budget is the challange. Cheers James - Original Message - From: "Stuart Henderson" To: Sent: Friday, May 29, 2009 7:37 PM Subject: Re: multilink VPN On 2009-05-29, Toni Mueller wrote: On Wed, 27.05.20

Re: multilink VPN

2009-05-29 Thread Stuart Henderson
On 2009-05-29, Toni Mueller wrote: > On Wed, 27.05.2009 at 22:07:25 -0300, James Mackinnon > wrote: >> I need to setup redundant VPN's between these locations without the use of >> BGP. > >> I have used sasync in the past, pfsync etc however, I have not tried to setup >> a VPN where 2 ISPs are u

Re: multilink VPN

2009-05-29 Thread Toni Mueller
Internet, between your sites? FWIW, I've configured semi-"multilink" VPN in the past (before the "CARP age"), with this kind of setup: LAN1 --- FW{1,2} --- Internet --- FW{3,4} --- LAN2 with LAN1, FW1, FW2: my end FW3, FW4, LAN2: other end (not accessible to me) Man

multilink VPN

2009-05-27 Thread James Mackinnon
Hi All Here is my situation and I am hoping for a little guidance on this one I have 2 locations, both with 2 fiber internet connections I need to setup redundant VPN's between these locations without the use of BGP. So, my setup would be something like this Location A Firewall 1 Connection t