Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 17 Mar 2004 18:55:29 +0000
From:      Lewis Thompson <lewiz@fajita.org>
To:        FreeBSD-questions <questions@freebsd.org>
Subject:   gif tunnel problem.
Message-ID:  <20040317185529.GA12243@lewiz.org>

next in thread | raw e-mail | index | archive | help

--zhXaljGHf11kAtnf
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hi,

This is the first time I've looked at gif tunnels and I'm only trying to
do something simple (by that I mean no IPsec, etc.)

  Diagrams are always useful for this, so here goes:

   (int)	  (ext)				(ext)		(int)
xl0 192.168.0.1	  xl1 a.b.c.d	-> 'net -> sis0 w.x.y.z	rl0 192.168.1.1
192.168.0.x/24						 192.168.1.x/24

  That's a pretty poor diagram, sorry.  Basically HostA has is the
default router for 192.168.0.0/24 with in 192.168.0.1 and external ip
a.b.c.d.  HostB is the same for 192.168.1.0/24 with external ip w.x.y.z.

  I want to set up an unencrypted tunnel between the two subnets using
gif.  So far on HostA I have:

ifconfig gif0 create
ifconfig gif0 tunnel a.b.c.d w.x.y.z
ifconfig gif0 192.168.0.1 192.168.1.1

and on HostB:

ifconfig gif0 create
ifconfig gif0 tunnel w.x.y.z a.b.c.d
ifconfig gif0 192.168.1.1 192.168.0.1

  I got these from the IPsec chapter in the handbook.  It states at this
point I should be able to ping 192.168.1.1 from HostA.  This does not
work.

  I see the echo in gif0 (using tcpdump) but it never seems to exit the
gif tunnel and hit xl1.  The same is true for HostB.

netstat -rn on HostA shows:
192.168.1.1        192.168.0.1        UH          0     3183   gif0

with an equivalent entry on HostB.

  What am I doing wrong?  I've tried to follow the chapter as best I can
but it has been little help.  Anybody able to point out the error in my
ways?

  Thanks a lot,

-lewiz.

--=20
I was so much older then, I'm younger than that now.  --Bob Dylan, 1964.
------------------------------------------------------------------------
-| msn:purple@lewiz.net | jabber:lewiz@jabber.org | url:www.lewiz.org |-

--zhXaljGHf11kAtnf
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.2.4 (FreeBSD)

iD8DBQFAWJ8hItq0KFQv7T8RAuQzAKCOzAj6SliRi/R4w4XpZmWfyCBl9gCghiDh
M7/DPGQlPGkvs8mIanLV7l0=
=o2/I
-----END PGP SIGNATURE-----

--zhXaljGHf11kAtnf--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20040317185529.GA12243>