> From: hilman firmansyah [mailto:[EMAIL PROTECTED] > NB : I still dont touch the IPSEC and encrypted section > ,since in the fbsd > handbooks said to make an encrypted section i must have the 2 networks > connected. Is this right?
You must have the networks connected (on the public side), but when using IPSec your gif tunnel won't really be used. It is just sort of a "placeholder" to get the routing correct. I am using a similar setup to your's (FreeBSD talking IPSec with a Cisco router) using the GIF tunnel pointing to a bogus remote address. You could essentialy achieve the same without GIF using static ARP entries, claiming that the MAC address of your machine's default gateway has the tunnel destination IP. Helge _______________________________________________ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "[EMAIL PROTECTED]"
