Subject: Re: Questions about VPN with IPsec
To: Allen D. Ball <ball@iprotium.com>
From: None <itojun@iijlab.net>
List: current-users
Date: 07/28/2001 10:19:47
>I have set up a configuration similar to the one described at
>http://www.netbsd.org/Documentation/network/ipsec/#sample_vpn.  The link
>comes up and I can run TCP between the two machines.  However, I am still
>having trouble seeing the remote machines on the local network and vice
>versa.  I am running 1.5.1 and I am using gif(4) as the endpoints of my
>tunnel.  I am also running routed(8) on each of the machines.  I did not
>assign IPv6 addresses to the gif(4) interfaces nor the physical NICs.  The
>two address clouds are -net 10.1.0.0/16 and -net 10.254.0.0/16 and the
>endpoints of the tunnel are 10.0.0.1 and 10.0.0.254, respectively.

	run tcpdump and see what kind of traffic you are having with the setup.
	also, an exact network diagram (ASCII art), as well as exact
	route/setkey/ifconfig setups (you may mask secret keys) are the
	MUST for this kind of question.

>My questions are:
>
>Do I need to do any IPv6 configuration to make this work?

	no.

>Is gif(4) the right hammer for this nail?

	you shouldn't need gif(4).
	http://www.netbsd.org/Documentation/network/ipsec/#sample_vpn
	does not mention gif(4), because you shoulnd't need one.

itojun