Subject: Re: VPN and routing
To: Michael Richardson <mcr@sandelman.ottawa.on.ca>
From: George Abdelmalik <gabdelmalik@avdat.com.au>
List: current-users
Date: 10/18/2007 09:30:32
On Thursday 18 October 2007 01:24, Michael Richardson wrote:
> >>>>> "Matthias" == Matthias Scheler <tron@zhadum.org.uk> writes:
>
>     Matthias> [This really belongs on "tech-net@NetBSD.org]
>
>     Matthias> On Mon, Oct 15, 2007 at 02:08:53PM -0500, Steve Pribyl
>
>     Matthias> wrote:
>     >> How do I get my netbsd box to route on the same network?
>     >>
>     >> 192.168.0.0/24--->[netbsd box 192.168.0.1] ^
>     >>
>     >> [via IPSEC VPN 192.168.0.200/24]--|
>     >>
>     >> The netbsd box is running 4.0 rc2 racoon and pf.
>     >>
>     >> How do I get the netbsd box to "listen" for vpn destine traffic,
>     >> or is this just not the way to do it.
>
>     Matthias> Is that your problem?
>
>   I don't think you got it.
>
>   I think he has extruded the IP 192.168.0.200 to this remote machine.
> The gateway is 192.168.0.1.  The question is, how can he make
> 192.168.0.1 pick up packets for .200 and send them over the link.
>   The answer is proxy-arp.

Yes thats what I would try. On the 192.168.0.1 machine do:
# arp -s 192.168.0.200 MAC_ADDR_OF_192.168.0.200

Also see arp(8) for all the details.

-
george.