On Mon, Jan 07, 2002 at 01:49:19PM -0500, Alwyn Goodloe wrote:
>
> Hi folks, I am trying to set up an IPV4 over IPV4 tunnel on a testbed of
> four systems I have setup for research. Because its research my configuration
> is probably a bit different than most of you would run in practice.
> The first test would have a tunnel bewteen the two ends of the network.
> (You can think of this as the client and server both acting as gateways
> with two routers in between).
>
> >From the somewhat limited documentation I did the
> following:
>
> gifconfig gif0 inet 192.168.1.3 192.168.5.12
> ifconfig gif0 inet 192.168.1.3 192.168.5.12
> route add -net 192.168.5.12 -interface gif0
>
> Unfortunately I get the error message:
>
> error_message=/kernel:gif_out:recursively called too many times
>
>
> Anyone got any ideas??

The physical endpoints can't be the same as the tunnel endpoints.
Choose different values for ifconfig. If you just want to encrypt
traffic between two hosts, no tunnels are needed.

> Also I would like to nest tunnels and by that I mean
>
> say have an end to end tunnel with ESP but have each intermediate router
> (there are two of them) check AH headers on the packet. Anyone see any
> problems with this.

No clue. Actually nesting gif tunnels requires that you define
XBONEHACK when building your kernel.

-- Brooks

-- 
Any statement of the form "X is the one, true Y" is FALSE.
PGP fingerprint 655D 519C 26A7 82E7 2529  9BF0 5D8E 8BE9 F238 1AD4

-----BEGIN PGP SIGNATURE----- Version: GnuPG v1.0.6 (GNU/Linux) Comment: For info see http://www.gnupg.org

iD8DBQE8Oe/SXY6L6fI4GtQRAsLAAKC/HZScqaAYChHRi9r/frKif+BcvgCfYuRo jkID5jrOYSr907OlXN0Rics= =xHBC -----END PGP SIGNATURE-----

To Unsubscribe: send mail to majordomoFreeBSD.org with "unsubscribe freebsd-security" in the body of the message

• Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]