IPSEC Tunnels vs Dynamoic IPs

2001-09-18 Thread Jerry Murdock
Can an IPSEC tunnel be established between two LANs when one side is using PPPoE/DSL with dynamic IP using either manual keys or IKE? IOW: LAN 1 (10.2.2.0/24) | FreeBSD Gateway(T1/Static IP) | | IPSEC Tunnel over Internet | | FreeBSD Gateway(PPPoE/Dynamic IP) | LAN

Re: ipfw problems ...

2001-09-18 Thread Julian Elischer
"Marc G. Fournier" wrote: > > I recently setup a box on our network, running FreeBSD 4.4-PRERELEASE, > with ipfw and dummynet to do bandwidth shaping as well as firewalling ... > > The machine is a Dual PIII 733 w/1gig of RAM and 2xfxp0 devices ... > > I've got an /etc/fw.rules file that has ~1

Re: ipfw problems ...

2001-09-18 Thread Anthony Schneider
it might have something to do with the prereleasenature of the machine. -Anthony. On Tue, Sep 18, 2001 at 11:14:50PM -0400, Marc G. Fournier wrote: > > I recently setup a box on our network, running FreeBSD 4.4-PRERELEASE, > with ipfw and dummynet to do bandwidth shaping as well as firewalling

Re: ipfw problems ...

2001-09-18 Thread Marc G. Fournier
I recently setup a box on our network, running FreeBSD 4.4-PRERELEASE, with ipfw and dummynet to do bandwidth shaping as well as firewalling ... The machine is a Dual PIII 733 w/1gig of RAM and 2xfxp0 devices ... I've got an /etc/fw.rules file that has ~1200 rules in it so far, and still have m

SOLVED - kernel arp messages

2001-09-18 Thread Mike Saunders
On Tue, 18 Sep 2001, Julian Elischer wrote: > Date: Tue, 18 Sep 2001 19:05:21 -0700 (PDT) > From: Julian Elischer <[EMAIL PROTECTED]> > To: Mike Saunders <[EMAIL PROTECTED]> > Cc: Lars Eggert <[EMAIL PROTECTED]>, [EMAIL PROTECTED] > Subject: RE: kernel arp messages > > > > > Date: Tue, 18 Sep 2

kernel arp messages (Take 2) ;))

2001-09-18 Thread Dominic Blais
Sep 13 08:26:40 samuel /kernel: arplookup 0.0.0.0 failed: host is not on local network I always get this message every 12 minutes... I use 2 NIC with VLAN on it.. All interfaces have an IP but some VLANS which are "down" . Where's the problem?? Thanks -- Dominic Blais Administrateur res

RE: kernel arp messages

2001-09-18 Thread Julian Elischer
On Tue, 18 Sep 2001, Mike Saunders wrote: > Thanks for all the replies gentlemen! I'll try to clear some things up > here: > > On Tue, 18 Sep 2001, Lars Eggert wrote: > > > Date: Tue, 18 Sep 2001 17:31:24 -0800 > > From: Lars Eggert <[EMAIL PROTECTED]> > > To: Mike Saunders <[EMAIL PROTECTED

RE: kernel arp messages

2001-09-18 Thread Mark J. Sommer
I have several client's I've setup with multiple gateways (office WAN, Internet Gateway). I think this thread is derailed. 4.3 Release and prior (as far as I know) have long supported this configuration. At 08:08 AM 9/19/2001 +0800, [EMAIL PROTECTED] wrote: >Is it possible to specify a gatewa

RE: kernel arp messages

2001-09-18 Thread Mike Saunders
On Tue, 18 Sep 2001, Julian Elischer wrote: > Date: Tue, 18 Sep 2001 18:25:52 -0700 (PDT) > From: Julian Elischer <[EMAIL PROTECTED]> > To: Anuranjan <[EMAIL PROTECTED]> > Cc: 'Lars Eggert' <[EMAIL PROTECTED]>, 'Mike Saunders' <[EMAIL PROTECTED]>, > [EMAIL PROTECTED] > Subject: RE: kernel ar

RE: kernel arp messages

2001-09-18 Thread Mike Saunders
Thanks for all the replies gentlemen! I'll try to clear some things up here: On Tue, 18 Sep 2001, Lars Eggert wrote: > Date: Tue, 18 Sep 2001 17:31:24 -0800 > From: Lars Eggert <[EMAIL PROTECTED]> > To: Mike Saunders <[EMAIL PROTECTED]>, [EMAIL PROTECTED] > Subject: RE: kernel arp messages > >

RE: kernel arp messages

2001-09-18 Thread Julian Elischer
On Tue, 18 Sep 2001, Anuranjan wrote: > ifconfig_xl0="inet 209.74.92.209 netmask 255.255.255.0" > ifconfig_ep0="inet 209.74.87.1 netmask 255.255.255.0" > > the netmasks are for the same subnet ... that is the thing that results in > the kernel giving out these messages. If it's two different n

RE: kernel arp messages

2001-09-18 Thread Lars Eggert
> ifconfig_xl0="inet 209.74.92.209 netmask 255.255.255.0" > ifconfig_ep0="inet 209.74.87.1 netmask 255.255.255.0" > > the netmasks are for the same subnet ... that is the thing that results in > the kernel giving out these messages. If it's two different > networks/subnets > that're in picture the

RE: kernel arp messages

2001-09-18 Thread Anuranjan
ifconfig_xl0="inet 209.74.92.209 netmask 255.255.255.0" ifconfig_ep0="inet 209.74.87.1 netmask 255.255.255.0" the netmasks are for the same subnet ... that is the thing that results in the kernel giving out these messages. If it's two different networks/subnets that're in picture then you could t

RE: kernel arp messages

2001-09-18 Thread Lars Eggert
> Sep 18 15:01:54 router /kernel: arp: 209.74.87.1 is on lo0 but got reply > from 00:60:08:35:57:4e on xl0 And this is *really* ugly! Are you proxy-arping? Someone is advertising one of your local IP addresses. Again, I think a picture of your setup would help. It sounds like you're simply tryin

RE: kernel arp messages

2001-09-18 Thread Lars Eggert
> I'm running a 3.4-RELEASE i386 machine with two network cards. The > machine acts as a router between my LAN and my provider's network. ep0 is > the NIC connected to my LAN and xl0 is my provider's network. These ARP messages usually occur when people think they must hook two NICs up to the s

RE: kernel arp messages

2001-09-18 Thread Anuranjan
I don't know but am quite interested in knowing about that. Couldn't do that in my case with 4.3version. -Original Message- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED]] Sent: Tuesday, September 18, 2001 5:08 PM To: [EMAIL PROTECTED]; [EMAIL PROTECTED]; [EMAIL PROTECTED] Subject: RE:

RE: kernel arp messages

2001-09-18 Thread francisv
Is it possible to specify a gateway for each NIC on the next release of FreeBSD? > -Original Message- > From: Anuranjan [mailto:[EMAIL PROTECTED]] > Sent: Wednesday, September 19, 2001 8:02 AM > To: 'Mike Saunders'; [EMAIL PROTECTED] > Subject: RE: kernel arp messages > > I recently came

RE: kernel arp messages

2001-09-18 Thread Anuranjan
I recently came across the same prblem myself. You're facing it because of the same subnet mask on your cards. In freeBSD if you configure two cards on the same subnet the kernel gets confused as to which card is the gateway to the router. THe kernel seems to make this decision based on the fact

kernel arp messages

2001-09-18 Thread Mike Saunders
Hello! I'm hoping somebody can help me with this problem. I'm about at my wit's end. The problem is that i'm receiving the following messages constantly, at the console, in the syslog, and to root's terminal. Sep 18 15:01:54 router /kernel: arp: 209.74.92.1 is on xl0 but got reply from

arp X moved from Y to Z messages

2001-09-18 Thread Garrett Wollman
< said: > The gateway's IP address actually refers to two different machines. > Naturally the gateway is used quite a bit, and the syslog fills up with "arp > X moved from Y to Z on fxp0" messages. That's really not the right way to do it, and probably doesn't balance the load as well as you mig

Re: simple static NAT question

2001-09-18 Thread Brian Somers
> If you have multiple private ip's pointing to the same public ip will > traffic originating from each individual ip going out find it's way back to > the original internal ip on its way back in? Yes. -- Brian <[EMAIL PROTECTED]><[EMAIL PROTECTED]> http://www.freebsd-servi

simple static NAT question

2001-09-18 Thread Peter Brezny
If you have multiple private ip's pointing to the same public ip will traffic originating from each individual ip going out find it's way back to the original internal ip on its way back in? the man page states that inbound traffic will be handed to the last private ip in the list, but it wasn't

Re: arp X moved from Y to Z messages

2001-09-18 Thread Maxim Konovalov
Oh, i am sorry, i was wrong, net.link.ether.inet.log_arp_wrong_iface is for another problem. On Tue, 18 Sep 2001, Maxim Konovalov wrote: > > Hello, > > On Tue, 18 Sep 2001, Matthew Luckie wrote: > > > Hi there > > > > At work there are several freebsd machines that route packets through a > > "

Re: arp X moved from Y to Z messages

2001-09-18 Thread Maxim Konovalov
Hello, On Tue, 18 Sep 2001, Matthew Luckie wrote: > Hi there > > At work there are several freebsd machines that route packets through a > "load balanced" or "redundant" router configuration. > The gateway's IP address actually refers to two different machines. > Naturally the gateway is used q

arp X moved from Y to Z messages

2001-09-18 Thread Matthew Luckie
Hi there At work there are several freebsd machines that route packets through a "load balanced" or "redundant" router configuration. The gateway's IP address actually refers to two different machines. Naturally the gateway is used quite a bit, and the syslog fills up with "arp X moved from Y to