Re: GRE or gif keepalive

2007-05-17 Thread Stuart Henderson
On 2007/05/17 18:44, Alex Berdan wrote: > This is a nice feature which can be used in cases where you don't run > any dynamic routing protocol over GRE/IPSec tunnel. > If you have OpenBSD as VPN concentrator you can have SNMP traps when > the tunnel is down and take any action etc. > > Here is the

Re: GRE or gif keepalive

2007-05-17 Thread Alex Berdan
This is a nice feature which can be used in cases where you don't run any dynamic routing protocol over GRE/IPSec tunnel. If you have OpenBSD as VPN concentrator you can have SNMP traps when the tunnel is down and take any action etc. Here is the CISCO implementation: http://www.cisco.com/en/US/

Re: GRE or gif keepalive

2007-05-17 Thread Stuart Henderson
On 2007/05/17 18:02, Alex Berdan wrote: > I was curious about the GRE implementation on OpenBSD as in CISCO > there are keepalives Unfortunately, despite GRE being documented across a number of RFCs, there's no mention of this. Looks like it's probably a cisco- proprietary extension, I couldn't fi

Re: GRE or gif keepalive

2007-05-17 Thread Alex Berdan
Thanks anyway! I was curious about the GRE implementation on OpenBSD as in CISCO there are keepalives and I can have SNMP traps in case the IPSec tunnel is down (GRE interface is down). The BGP works just fine and the routes converge exactly as I wanted. Is OpenBSD having any plans with this GRE

Re: GRE or gif keepalive

2007-05-17 Thread Stuart Henderson
On 2007/05/17 17:11, Alex Berdan wrote: > I heard about this command. I ain't using OSPF for the link state I use BGP. Well, you could lower your timers then... > My GRE interface never goes down when the IPsec goes down. That's normal, gre doesn't know about link state.

Re: GRE or gif keepalive

2007-05-17 Thread Alex Berdan
Thanks Stuart, I heard about this command. I ain't using OSPF for the link state I use BGP. My GRE interface never goes down when the IPsec goes down. Is this normal? Cosmetic bug? Thanks, Rgds, Alex On 5/17/07, Stuart Henderson <[EMAIL PROTECTED]> wrote: On 2007/05/17 13:46, Alex Berdan wrot

Re: GRE or gif keepalive

2007-05-17 Thread Stuart Henderson
On 2007/05/17 13:46, Alex Berdan wrote: > Do you know if GRE or gif is having a keepalive option? Not directly, but you can add one using ospfd(8) or ifstated(8).