>If you were using tunnel mode, the encrypted packet would change its >source and destination IP's, specifying your gateway as the source, and >your vendor's gateway as the destination, so intervening routers would >have no difficulty delivering the packet, or routing reply packets back >to you.
This may be where my misunderstanding is coming from. Our vendor has not specified an internal IP address for the other end of the tunnel. They have given me an address to ping once the connection is up and running though. Is it possible to using tunneling mode without an internal IP address on the other gateway? My understanding of the protocol is that this is not possible. Thank you for your help. Jay _______________________________________________ freebsd-net@freebsd.org mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "freebsd-net-unsubscr...@freebsd.org"