Re: Terminate IPSEC tunnel in virtual routing domain

2011-05-18 Thread Reyk Floeter
Hi, running IPsec in multiple rdomains is supported since about a year and should work just fine. iked(8) has extended support for it but it should also work with isakmpd(8). - You need to create an enc(4) interface for the non-default rdomain. Traffic will only flow if there is an enc(4) interf

Re: Terminate IPSEC tunnel in virtual routing domain

2011-05-18 Thread Claer
On Tue, May 17 2011 at 39:21, patrick.oesch...@bluewin.ch wrote: > ...gives me some headache... > > system1: (openbsd 4.9) > em0 192.168.1.54 (same /24 subnet as system2) > /etc/isakmpd/isakmpd. > conf: > Listen-on= 192.168.1.54 > isakmpd -K > > system2: (openbsd 4.9) > em0 192.168.1.200 (sa

Re: Terminate IPSEC tunnel in virtual routing domain

2011-05-17 Thread Martin Pelikan
2011/5/17 James Records : > Not sure about this but try doing it this way: > > route -T 1 exec netstat -an -f inet Peeking at the netstat code the -a uses kread(), which signs people are afraid of it and those parts are to be rewritten using some standardized sysctl() interface, and then rdomain c

Re: Terminate IPSEC tunnel in virtual routing domain

2011-05-17 Thread James Records
Not sure about this but try doing it this way: route -T 1 exec netstat -an -f inet from man route... J On Tue, May 17, 2011 at 2:39 PM, patrick.oesch...@bluewin.ch < patrick.oesch...@bluewin.ch> wrote: > ...gives me some headache... > > system1: (openbsd 4.9) > em0 192.168.1.54 (same /24 subne