Hello,

Since we see ESP traffic directly on the ep0 interface, packets are not going through gif0 as stated in the routing table. IPsec SPD is overriding the routing table, can you check (provide us) with setkey -DP and setkey -D if no SPD is present from your net to 192.168.4.0/24 ?

Regards, Alex.

Yes they are (network on the other side of the tunnel is 192.168.4.0/24) :
%%%
yoda:tools# netstat -rnf inet
Routing tables


Internet:
Destination Gateway Flags Refs Use Netif Expire
default <hidden gw> UGSc 24 17513460 ep0
[...]
192.168.4 192.168.4.13 UGSc 0 691911 gif0
192.168.4.13 192.168.1.1 UH 3 6949 gif0

_______________________________________________ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "[EMAIL PROTECTED]"

Reply via email to