Bjoern A. Zeeb wrote:
On Tue, 27 May 2008, Tom Judge wrote:
Hi,
Today I looked into why I can not get a traceroute across a IPSec IPIP
tunnel
I guess not an IPIP tunnel but just IPsec tunnel mode?
...
Any information about this would be appreciated as I would like to be
able to do traceroutes across my wan.
The problem has been well known and is on my todo list. I haven't
checked the relevant code lately but if I remember the problem is not
to be fixed trivially in first place.
You should get a reply back from your Node B though, just not from
Router B.
/bz
Hi Bjoern,
Yes we do indeed see a reply from node b. It is good to here that this
is a known issue.
The IPSec configuration is a gif ipip tunnel that is then encrypted with
IPSec using esp in tunnel mode as per the ipsec vpn section in the handbook.
Do you have any more information on the underlying source of the
problem? If so it would help me find the problem. I may setup a small
test network to find this problem this evening time permitting.
Thanks
Tom
PS. Could you pm me a link to your RELENG_7 multi ip jail patchs?
_______________________________________________
freebsd-net@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-net
To unsubscribe, send any mail to "[EMAIL PROTECTED]"
