I have the idea that to make DHCP work over IPSec on my VPN gateway, I have to make dhcpd listen on lo0, and then have dhcrelay listen on enc0 and relay to lo0. (dhcpd runs on same machine)
It seems from the dhcrelay man page that this is possible and that the -o switch is even enabled by default when using an enc interface, to supply the necessary relay agent information. However, upon trying to execute dhcrelay -do -i enc0 127.0.0.1, I get "enc0: not found" and it exits. ifconfig shows enc0 is up. Why doesn't dhcrelay find enc0? And Is this the proper way to make this work? I am working under the assumption that dhcrelay and dhcpd both support RFC 3046.

