From owner-freebsd-hackers Tue Jun 11 12:19:46 2002 Delivered-To: freebsd-hackers@freebsd.org Received: from smurf.jnielsen.net (12-254-136-47.client.attbi.com [12.254.136.47]) by hub.freebsd.org (Postfix) with ESMTP id 70CD437B401 for ; Tue, 11 Jun 2002 12:19:39 -0700 (PDT) Received: from max (max.local [192.168.0.9]) by smurf.jnielsen.net (8.12.3/8.12.3) with SMTP id g5BJJb5b000352 for ; Tue, 11 Jun 2002 13:19:37 -0600 (MDT) (envelope-from hackers@jnielsen.net) Message-ID: <015301c2117d$0db539c0$0900a8c0@max> From: "John Nielsen" To: Subject: gif(4) tunnel through MSN DSL modem Date: Tue, 11 Jun 2002 13:20:31 -0600 MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: 7bit X-Priority: 3 X-MSMail-Priority: Normal X-Mailer: Microsoft Outlook Express 6.00.2600.0000 X-MimeOLE: Produced By Microsoft MimeOLE V6.00.2600.0000 Sender: owner-freebsd-hackers@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG Hi folks, I tried this on -questions without any luck, so I'm hoping for a better response here . :) I remotely administer a FreeBSD 4.5 machine that is connected to the internet through and MSN DSL modem. This modem does NAT (for a single client) rather than bridging the connection. So the FreeBSD machine thinks its public address is 192.168.1.2 (when in reality the modem is the only device with a public address). This machine is itself doing NAT, acting as a firewall and gateway for a private network. I would like to establish a gif(4) tunnel between this machine and my firewall here in order to link the two private networks into one virtual network. I have done this before with two machines that were directly connected to the internet, but in this case the DSL modem on the far end seems to be fouling things up. The modem seems to be passing everything through, but I haven't gotten gif to work. Any ideas? Here's what I've tried--this is how I'd set it up if the DSL modem weren't in the way. [excerpts from rc.conf on far (DSL) end] # Private interface ifconfig_xl0="inet 192.168.6.1 netmask 255.255.255.0" # "Public" interface -- 192.168.1.2 netmask 255.255.255.252" ifconfig_ed0="DHCP" gif_interfaces="gif0" gifconfig_gif0="DSL.public.ip myend.public.ip" ifconfig_gif0="192.168.6.1 192.168.0.1" static_routes="john" route_john="-net 192.168.0 -interface gif0" [excerpts from rc.conf on this {my) end] # Private interface ifconfig_ep0="inet 192.168.0.1 netmask 255.255.255.0" # Public interface ifconfig_ed0="DHCP" gif_interfaces="gif0" gifconfig_gif0="myend.public.ip DSL.public.ip" ifconfig_gif0="192.168.0.1 192.168.6.1" static_routes="DSL" route_DSL="-net 192.168.6 -interface gif0" I've tried both the modem's (real) public address and 192.168.1.1 (the public interface's address) for DSL.public.ip, but neither seems to work. Can this be made to work? Can gif be hacked so it will work? I can't justify switching to a more expensive provider just so this tunnel will work, since it will mostly be a convenience for me and not the client. As far as I know, there's no way to modify any settings on the DSL modem itself. I do have full access to both FreeBSD machines. Again, any suggestions or even a detailed description of why this won't work would be appreciated. Thanks, JN To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-hackers" in the body of the message