Ipsec + bridge + egre issue with multiple bridges an non-static ip

2022-11-26 Thread Markus Wipp
Hi all, I hope that someone here on the list could give me some hints on how I can make my setup working. I have the following setup: "Virtual server 1" is connected to "Virtual server 2" via egre over ipsec on both sides I’m using a bridge and a vether interface. Both virtual servers are loca

Re: Ipsec + bridge + egre issue with multiple bridges an non-static ip

2022-11-26 Thread Markus Wipp
Hi all, Sorry for the noise. I found out that it was pf. When I tested with pf disabled I always only did this with pf disabled on one side. Once I disabled on both sides it worked. So I need to figure out now, what exactly is the issue. Thanks Markus > On 26. Nov 2022, at 11:19, Markus W

GRE IP6/IP6 not working as soon as pf is enabled

2022-01-15 Thread Markus Wipp
Hi all, This is my first mail to an OpenBSD list, so I hope I chose the correct one. I’m trying to get a GRE tunnel in combination with pf working a few days now on my OpenBSD (OpenBSD 7.0 (GENERIC.MP) #232: Thu Sep 30 14:25:29 MDT 2021) If I disable pf with pfctl -d the connection is working

Re: GRE IP6/IP6 not working as soon as pf is enabled

2022-01-15 Thread Markus Wipp
Hi David, First of all thank you so much taking the time for my question! > My first impression is that you're confusing where to apply policy to > the encapsulated traffic. "pass on gre proto gre" implies you're > trying to pass GRE packets as they go over gre(4) interfaces, but > it's the unenc

Fwd: GRE IP6/IP6 not working as soon as pf is enabled

2022-01-16 Thread Markus Wipp
t: Re: GRE IP6/IP6 not working as soon as pf is enabled > Date: 16. January 2022 at 08:03:39 CET > To: Markus Wipp > > Hi, > > You look like you might understand german so I have a german link for you: > > https://wiki.freifunk-franken.de/w/Benutzer:PeterPhilipp#GRE_konfigur

Re: GRE IP6/IP6 not working as soon as pf is enabled

2022-01-16 Thread Markus Wipp
yes, thats correct and just to make sure you got my last email. I was able to fix my issue inthe meantime by adding allow-opts > On 16. Jan 2022, at 12:40, David Gwynne wrote: > > you've set the net.inet.gre.allow sysctl to 1, right? > >> On 16 Jan 2022, at 17