Tunneling issues

zaphod at fsklaw.com zaphod at fsklaw.com
Wed Jul 9 18:04:57 UTC 2008

> zaphod at fsklaw.com wrote:
>>> At 11:21 AM 7/9/2008, zaphod at fsklaw.com wrote:
>>>> I agree it should work.  But it's not.  With respect to the next two
>>>> questions, yes and yes.
>>> Can you post some of the configs you are using for 3 of the sites so
>>> we can perhaps spot the problem(s) you are having ? I have a similar
>>> setup with 5 sites, all talking to each other via IPSEC tunnels. Its
>>> a lot of policies, but they work just fine.
>>>> I'm not a huge fan of OpenVPN, but the bigger issue is that the gif
>>>> tunnels come up at boot up. As well as routes.  Given the client
>>>> server
>>>> nature of OpenVPN it is suitable, because if a server reboots, I'm not
>>>> certain a client would auto re-connect.
>>> We have ~ 400 sites running OpenVPN across Canada that all reconnect
>>> just fine after reboots / power cycles etc.  We dont let the clients
>>> talk to each other, but that would just be a config change to allow
>>> that to work.
>>>          ---Mike
>> Last first.  Well that's good info on OpenVPN.
>> As to the first, I'm not even at the ipsec stage yet.  I'm just trying
>> to
>> get tunnels up.  I wrote a couple of shell scripts to bring them up for
>> testing.
>> Server1
>> orange# more mkgif
>> #/bin/sh
>> ifconfig gif1 create
>> ifconfig gif1
> ^^^^  what's that for?

Well added that as I was googling the problem someone had said to do it so
I tried it.  Wasn't there initially.  Doesn't work with or without.

> since you over-ride it in the next line vvvvv
>> ifconfig gif1 inet netmask
> (PTP links don't have netmasks)

Got it from the manual

# ifconfig gif0 create
# ifconfig gif0 tunnel A.B.C.D W.X.Y.Z
# ifconfig gif0 inet netmask 0xffffffff

I'll try it without.



More information about the freebsd-net mailing list