Re: question on tunnels (VPN)

2004-09-23 Thread Paul Schenkeveld
On Wed, Sep 22, 2004 at 04:17:59PM +, Mikhail P. wrote: Dear users, I have been experimenting with simple gif tunnels (no IPSec) in local network (192.168.0.0/24). I have used the following scenario between two hosts (both running FreeBSD-5.2.1): HOST_A [192.168.0.1]: ifconfig gif0

question on tunnels (VPN)

2004-09-22 Thread Mikhail P.
Dear users, I have been experimenting with simple gif tunnels (no IPSec) in local network (192.168.0.0/24). I have used the following scenario between two hosts (both running FreeBSD-5.2.1): HOST_A [192.168.0.1]: ifconfig gif0 create ifconfig gif0 tunnel 192.168.0.1 192.168.0.2 ifconfig gif0

Re: question on tunnels (VPN)

2004-09-22 Thread Julian Elischer
Mikhail P. wrote: Dear users, I have been experimenting with simple gif tunnels (no IPSec) in local network (192.168.0.0/24). I have used the following scenario between two hosts (both running FreeBSD-5.2.1): HOST_A [192.168.0.1]: ifconfig gif0 create ifconfig gif0 tunnel 192.168.0.1

Re: question on tunnels (VPN)

2004-09-22 Thread Mikhail P.
On Wednesday 22 September 2004 21:26, Julian Elischer wrote: I use MPD using the UDP transport. in other words packets get sent as udp packets. I then set up IPSEC to encrypt the UDP packets.. when I had a NAT in the way I did further encapsulate the GRE packets in UDP again :-) Julian,

Re: question on tunnels (VPN)

2004-09-22 Thread Edwin Groothuis
On Wed, Sep 22, 2004 at 04:17:59PM +, Mikhail P. wrote: HOST_A [192.168.0.1]: ifconfig gif0 create ifconfig gif0 tunnel 192.168.0.1 192.168.0.2 ifconfig gif0 10.0.0.1 10.0.0.2 netmask 255.255.255.255 and on - HOST_B [192.168.0.2]: ifconfig gif0 create ifconfig gif0 tunnel

Re: question on tunnels (VPN)

2004-09-22 Thread Mikhail P.
On Wednesday 22 September 2004 23:18, Edwin Groothuis wrote: I have the same situation here and the solution was to let the ADSL router forward all unknown traffic to my router. How to do that is router specific, but it can be done. Then, with the tunnels: central# ifconfig gif1 inet gif1:

Re: question on tunnels (VPN)

2004-09-22 Thread Julian Elischer
Mikhail P. wrote: On Wednesday 22 September 2004 21:26, Julian Elischer wrote: I use MPD using the UDP transport. in other words packets get sent as udp packets. I then set up IPSEC to encrypt the UDP packets.. when I had a NAT in the way I did further encapsulate the GRE packets in UDP again