Re: ipsec home network to colo server

2008-05-17 Thread Jose Quinteiro
No, "egress" is an interface group. Man ifconfig. You have to use that 'cause you outgoing (egress) IP address changes. The pf-style "(eth0)" syntax where "eth0" is your outside interface may work too. Try it and see. Saludos, Jose. Lord Sporkton wrote: So egress being something very much

Re: ipsec home network to colo server

2008-05-17 Thread Lord Sporkton
So egress being something very much like "any" then? 2008/5/17 Jose Quinteiro <[EMAIL PROTECTED]>: > http://www.openbsd.org/papers/asiabsdcon07-ipsec/mgp00065.html > > try > > ipsec.conf on fire: > angie = "208.70.72.13" > fire = "10.0.0.0/24" > > ike esp from $fire to $angie local egress \ >

Re: ipsec home network to colo server

2008-05-17 Thread Jose Quinteiro
http://www.openbsd.org/papers/asiabsdcon07-ipsec/mgp00065.html try ipsec.conf on fire: angie = "208.70.72.13" fire = "10.0.0.0/24" ike esp from $fire to $angie local egress \ srcid "fire.sporkton.com" dstid "angie.sporkton.com" ipsec.conf on angie: angie = "208.70.72.13" fire = "10.0

Re: ipsec home network to colo server

2008-05-17 Thread Lord Sporkton
2008/5/15 Claer <[EMAIL PROTECTED]>: > On Thu, May 15 2008 at 09:09, Lord Sporkton wrote: > >> 2008/5/14 Lord Sporkton <[EMAIL PROTECTED]>: >> > 2008/5/14 scott learmonth <[EMAIL PROTECTED]>: >> >>> On Tue, May 13, 2008 at 5:41 PM, Lord Sporkton <[EMAIL PROTECTED]> >> >>> wrote: >> I am trying

Re: ipsec home network to colo server

2008-05-15 Thread Claer
On Thu, May 15 2008 at 09:09, Lord Sporkton wrote: > 2008/5/14 Lord Sporkton <[EMAIL PROTECTED]>: > > 2008/5/14 scott learmonth <[EMAIL PROTECTED]>: > >>> On Tue, May 13, 2008 at 5:41 PM, Lord Sporkton <[EMAIL PROTECTED]> > >>> wrote: > I am trying to set up a ipsec link between my home netwo

Re: ipsec home network to colo server

2008-05-15 Thread Lord Sporkton
2008/5/14 Lord Sporkton <[EMAIL PROTECTED]>: > 2008/5/14 scott learmonth <[EMAIL PROTECTED]>: >>> On Tue, May 13, 2008 at 5:41 PM, Lord Sporkton <[EMAIL PROTECTED]> >>> wrote: I am trying to set up a ipsec link between my home network(private ip network behind dynamic public ip) an

Re: ipsec home network to colo server

2008-05-14 Thread Lord Sporkton
2008/5/14 scott learmonth <[EMAIL PROTECTED]>: >> On Tue, May 13, 2008 at 5:41 PM, Lord Sporkton <[EMAIL PROTECTED]> >> wrote: >>> I am trying to set up a ipsec link between my home network(private ip >>> network behind dynamic public ip) >>> and my colo server(single public static ip). I was a b

Re: ipsec home network to colo server

2008-05-14 Thread scott learmonth
> On Tue, May 13, 2008 at 5:41 PM, Lord Sporkton <[EMAIL PROTECTED]> > wrote: >> I am trying to set up a ipsec link between my home network(private ip >> network behind dynamic public ip) >> and my colo server(single public static ip). I was a bit unclear on >> how to set up a tunnel between a s

Re: ipsec home network to colo server

2008-05-14 Thread Lord Sporkton
2008/5/13 Jonathan <[EMAIL PROTECTED]>: > On Tue, May 13, 2008 at 5:41 PM, Lord Sporkton <[EMAIL PROTECTED]> wrote: >> I am trying to set up a ipsec link between my home network(private ip >> network behind dynamic public ip) >> and my colo server(single public static ip). I was a bit unclear on

Re: ipsec home network to colo server

2008-05-13 Thread Jonathan
On Tue, May 13, 2008 at 5:41 PM, Lord Sporkton <[EMAIL PROTECTED]> wrote: > I am trying to set up a ipsec link between my home network(private ip > network behind dynamic public ip) > and my colo server(single public static ip). I was a bit unclear on > how to set up a tunnel between a static >

ipsec home network to colo server

2008-05-13 Thread Lord Sporkton
I am trying to set up a ipsec link between my home network(private ip network behind dynamic public ip) and my colo server(single public static ip). I was a bit unclear on how to set up a tunnel between a static and dynamic ip interesting traffic: 208.70.72.13 -> 10.0.0.0/16 My sad seems to set