From owner-freebsd-net@FreeBSD.ORG  Fri Jul 27 02:46:27 2007
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 0CE0116A419
	for <freebsd-net@freebsd.org>; Fri, 27 Jul 2007 02:46:27 +0000 (UTC)
	(envelope-from Susan.Lan@zyxel.com.tw)
Received: from zyfb01-66.zyxel.com.tw (zyfb01-66.zyxel.com.tw [59.124.183.66])
	by mx1.freebsd.org (Postfix) with ESMTP id A113313C457
	for <freebsd-net@freebsd.org>; Fri, 27 Jul 2007 02:46:26 +0000 (UTC)
	(envelope-from Susan.Lan@zyxel.com.tw)
Received: from zytwbe01.zyxel.com ([172.23.5.10]) by zyfb01-66.zyxel.com.tw
	with Microsoft SMTPSVC(6.0.3790.1830); 
	Fri, 27 Jul 2007 10:46:25 +0800
Received: from zytwfe01.ZyXEL.com ([172.23.5.5]) by zytwbe01.zyxel.com with
	Microsoft SMTPSVC(6.0.3790.1830); Fri, 27 Jul 2007 10:46:25 +0800
Received: from [172.23.17.155] ([172.23.17.155]) by zytwfe01.ZyXEL.com with
	Microsoft SMTPSVC(6.0.3790.1830); Fri, 27 Jul 2007 10:46:24 +0800
Message-ID: <46A95C84.4040609@zyxel.com.tw>
Date: Fri, 27 Jul 2007 10:46:28 +0800
From: blue <susan.lan@zyxel.com.tw>
User-Agent: Mozilla Thunderbird 0.9 (Windows/20041103)
X-Accept-Language: en-us, en
MIME-Version: 1.0
To: Eric F Crist <ecrist@secure-computing.net>
References: <46A94632.6070602@zyxel.com.tw>
	<5D49E8B3-4ECB-45FF-807C-D0EE69BCAC54@secure-computing.net>
In-Reply-To: <5D49E8B3-4ECB-45FF-807C-D0EE69BCAC54@secure-computing.net>
Content-Type: text/plain; charset=ISO-8859-1; format=flowed
Content-Transfer-Encoding: 7bit
X-OriginalArrivalTime: 27 Jul 2007 02:46:24.0615 (UTC)
	FILETIME=[527D9770:01C7CFF8]
Cc: freebsd-net@freebsd.org
Subject: Re: IPv6 IPsec tunnel configuration
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 27 Jul 2007 02:46:27 -0000

Dear Eric:

Thanks for your reply, but this page explains how to setup configured 
tunnel for IPv6 packets over IPv4 network.

I need a gif0 interface whose endpoints are both IPv6 address, and the 
display should be like:

gif0: flags=8051<UP,POINTOPOINT,RUNNING,MULTICAST> mtu 1280
    tunnel inet aa:bb:cc:dd::ee --> ww:xx:yy::zz
    inet6 11:22:33:44::11 --> 55:66:77:88::55 netmask 0xffffffffffffffff
 
But currently I could not succeed in making the inner addresses.


Eric F Crist wrote:

> On Jul 26, 2007, at 8:11 PMJul 26, 2007, blue wrote:
>
>> Dear all:
>>
>> I want to set up the gif tunnel for IPv6 IPsec as the Freebsd  
>> Handbook http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/ 
>> ipsec.html
>> "VPN over IPsec" suggested for IPv4. However, I could not configure  
>> the local IP address via
>> "ifconfig gif0 inet6 <local private IPv6 address> <remote private  
>> IPv6 address>", ifconfig will complain the parameters are invalid!
>>
>> Is there any other way to configure the IPv6 IPsec tunnel?
>>
>> Thanks.
>>
>
> Take a look here and see if this helps you at all:
>
> https://www.secure-computing.net/wiki/index.php/IPv6_on_FreeBSD_6.2
>
>
> -----
> Eric F Crist
> Secure Computing Networks
>
>
>