Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 26 Aug 2011 14:54:37 -0400
From:      Mike Tancsa <mike@sentex.net>
To:        jhall@socket.net
Cc:        freebsd-questions@freebsd.org
Subject:   Re: Racoon to Cisco ASA 5505
Message-ID:  <4E57EBED.7070900@sentex.net>
In-Reply-To: <201108261840.p7QIebBP015777@smtp2.sentex.ca>
References:  <20110823232242.B78A5106566B@hub.freebsd.org> <4E545899.6090800@sentex.net> <20110825155205.A0D131065670@hub.freebsd.org> <4E5696D0.3000205@sentex.net> <201108261742.p7QHgS2H095637@smtp1.sentex.ca> <4E57E2B1.9000508@sentex.net> <201108261840.p7QIebBP015777@smtp2.sentex.ca>

Next in thread | Previous in thread | Raw E-Mail | Index | Archive | Help
On 8/26/2011 2:40 PM, jhall@socket.net wrote:
> 
> ----------------------------------------------------
>> IP-IP interface ? (GIF). If you are using that, then you will need very
>> different policies on both sides.  You should mention these little
>> "details" when posting your configs.  Can you please post your FULL
>> configuration / topology. Otherwise, its kind of impossible to know what
>> the issue might be
>>
>> 	---Mike
> 
> Connecting 10.129.0.0/16 to 192.168.100.0/22.  Their router is 
> 192.168.100.1, and my BSD box is 10.129.10.40. 

What does their policy look like ? Are they really setting up an IP-IP
tunnel on their side too ? Or just a regular ESP IPSEC tunnel. If they
are not setting up an IP-IP tunnel, than get rid of the gif interface.

-- 
-------------------
Mike Tancsa, tel +1 519 651 3400
Sentex Communications, mike@sentex.net
Providing Internet services since 1994 www.sentex.net
Cambridge, Ontario Canada   http://www.tancsa.com/



Want to link to this message? Use this URL: <http://docs.FreeBSD.org/cgi/mid.cgi?4E57EBED.7070900>