From owner-freebsd-questions Fri Jan 17 2:34:13 2003 Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id D15BD37B401 for ; Fri, 17 Jan 2003 02:34:12 -0800 (PST) Received: from perimeter.co.za (obelix.perimeter.co.za [209.212.102.154]) by mx1.FreeBSD.org (Postfix) with ESMTP id EC76243F3F for ; Fri, 17 Jan 2003 02:34:09 -0800 (PST) (envelope-from bsd@perimeter.co.za) Received: from localhost (localhost [127.0.0.1]) (uid 9999) by perimeter.co.za with local; Fri, 17 Jan 2003 12:34:01 +0200 From: bsd@perimeter.co.za To: "FreeBSD Question List" Subject: Can I use GRE on a gif device? Date: Fri, 17 Jan 2003 12:34:00 +0200 Mime-Version: 1.0 Content-Type: text/plain; format=flowed; charset="iso-8859-1" Content-Transfer-Encoding: 7bit Message-ID: Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Hi all. I have successfully configured a tunnel from a BSD box to a Cisco router using the gif device to implement the BSD end of the tunnel. The Cisco Technician doing the far end of the config said that the protocol of choice for the job is GRE (protocol 47 according to /etc/protocols). However, I found that gif is using IPENCAP (protocol 4 according to /etc/protocols). Said technician told me that GRE encrypts the tunneled data, while IPENCAP does not. So I guess there are really 2 questions: 1) Would it be wiser for me to run a tunnel on GRE than on IPENCAP? 2) Is there a way to tell gif to use GRE as the encapsulation protocol? I find no reference to GRE in the gif man page. Regards, Patrick O'Reilly. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message