Re: enc0 without MULTICAST flag

2024-09-21 Thread David Gwynne
On Fri, Sep 20, 2024 at 07:28:35AM +0200, Luca Di Gregorio wrote: > I achieved to implement the site-to-site vpn via sec0. > ospfd works on sec0. > > A couple of comments: > when sec0 is created, the default mtu is 1280. > I changed this value to 1500 and tested with > ping -D -s > I see that

Re: enc0 without MULTICAST flag

2024-09-19 Thread Luca Di Gregorio
I achieved to implement the site-to-site vpn via sec0. ospfd works on sec0. A couple of comments: when sec0 is created, the default mtu is 1280. I changed this value to 1500 and tested with ping -D -s I see that the max mtu is 1446, when the underlay network has mtu 1500. So, a scrub ( max-ms

Re: enc0 without MULTICAST flag

2024-09-19 Thread David Gwynne
On Thu, Sep 19, 2024 at 10:57:42PM +0200, Luca Di Gregorio wrote: > I'm running 7.5, I see this alert: > > # ifconfig sec0 create > # ifconfig sec0 tunnel 169.254.229.42/30 169.254.229.41 sorry, this should read: # ifconfig sec0 inet 169.254.229.42/30 169.254.229.41 i just committed a fix to th

Re: enc0 without MULTICAST flag

2024-09-19 Thread Luca Di Gregorio
I'm running 7.5, I see this alert: # ifconfig sec0 create # ifconfig sec0 tunnel 169.254.229.42/30 169.254.229.41 ifconfig: error in parsing address string: non-recoverable failure in name resolution I can't configure sec0 Il giorno gio 19 set 2024 alle ore 21:32 Luca Di Gregorio ha scritto: >

Re: enc0 without MULTICAST flag

2024-09-19 Thread Luca Di Gregorio
Thanks a lot, I'll try it tomorrow. Unfortunately I won't attend EuroBSDCon, anyway, thanks a lot for the invite. Il giorno gio 19 set 2024 alle ore 21:23 Jason Tubnor ha scritto: > Use sec(4) for this. Don’t use enc for anything except inspection. If you > are at EuroBSDCon this weekend, come

enc0 without MULTICAST flag

2024-09-19 Thread Luca Di Gregorio
I configured a site-to-site vpn with ike2, it works for unicast traffic. I need to enable ospf on the 2 hosts via enc0, but ifconfig enc0 shows: enc0: flags=41 index 2 priority 0 llprio 3 groups: enc status: active inet ... So, ospfd shows, in /var/log/daemon: