Gif IPTunnel networkA-to-networkB not work

[Oldach, Helge]

> From: hilman firmansyah [mailto:hilman at nap.net.id]
> NB : I still dont touch the IPSEC and encrypted section 
> ,since in the fbsd
> handbooks said to make an encrypted section i must have the 2 networks
> connected. Is this right?

You must have the networks connected (on the public side), but when using
IPSec your gif tunnel won't really be used. It is just sort of a
"placeholder"
to get the routing correct. I am using a similar setup to your's (FreeBSD
talking IPSec with a Cisco router) using the GIF tunnel pointing to a bogus
remote address. You could essentialy achieve the same without GIF using
static ARP entries, claiming that the MAC address of your machine's default
gateway has the tunnel destination IP.

Helge