Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 13 Sep 2001 12:44:38 -0700
From:      Brooks Davis <brooks@one-eyed-alien.net>
To:        Paul Root <proot@iaces.com>
Cc:        security@FreeBSD.ORG
Subject:   Re: IPSEC config
Message-ID:  <20010913124438.A19163@Odin.AC.HMC.Edu>
In-Reply-To: <3BA10B3F.610E6FB3@iaces.com>; from proot@iaces.com on Thu, Sep 13, 2001 at 02:38:39PM -0500
References:  <3BA10B3F.610E6FB3@iaces.com>

next in thread | previous in thread | raw e-mail | index | archive | help

--zYM0uCDKw75PZbzx
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Thu, Sep 13, 2001 at 02:38:39PM -0500, Paul Root wrote:
> Hi,=20
> 	I'm trying to setup a IPSec tunnel and am having trouble.
> Both machines are 4.4 RC3 (I think, last week). And when I set it up
> for a transport between the two machines it works fine, so racoon
> must be fine.
>=20
> 	I'm following the IPsec mini-HOWTO from January 2001 daemonnews.
> Here's my config on one end:
>=20
> #!/bin/sh
> # These commands need to be run on acesfbsd to
> # connect to lorax, in a IPSEC test
> #
> # Setup the tunnel device.
> gifconfig gif0 10.20.30.4 172.28.56.82

This won't work in 4.4.  There's no gif0 device at this point because gif
devices are now created at runtime.  Also, while gifconfig still works,
it's obsolete.  Instead use:

ifconfig gif0 create tunnel 10.20.30.4 172.28.56.82

These addresses should be the local machine's address and the remote
machines address (is the local machine really a 10.x address?)

-- Brooks

--=20
Any statement of the form "X is the one, true Y" is FALSE.
PGP fingerprint 655D 519C 26A7 82E7 2529  9BF0 5D8E 8BE9 F238 1AD4

--zYM0uCDKw75PZbzx
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For info see http://www.gnupg.org

iD8DBQE7oQylXY6L6fI4GtQRAoq6AJ43VjHyamnSad2mvxu/WbMsrG8dHACfZtVA
i1EZrKU35xHVJQSBrAWMSCQ=
=W7Gj
-----END PGP SIGNATURE-----

--zYM0uCDKw75PZbzx--

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010913124438.A19163>