Brian Candler wrote:
On Wed, Dec 28, 2005 at 04:26:43PM +0100, Eric Masson wrote:
gif/gre tunnels and ipsec transport mode are quite convenient when
associated with dynamic routing protocols.
OK, I'll buy gif + IPSEC transport mode as an option. [Although in that
case, perhaps what you want is an external IPSEC tunnel mode implementation
which attaches to a 'tun' device. That's yet another category which I hadn't
even considered]
I use ppp (mpd) over UDP over ipsec transport mode. That gives you a
"ng0" interface
for the tunnel. (netgraph pseudo interface)
I still think that gif + IPSEC tunnel mode (as currently documented) is not
a good approach, especially if it's the *only* mode of operation to be
documented and hence implicitly recommended as the 'right' way to do it.
_______________________________________________
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
_______________________________________________
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
