Re: multilink VPN

2009-05-31 Thread Stuart Henderson
On 2009-05-29, Stuart Henderson s...@spacehopper.org wrote: OSPF over gre's or gif's (which can then themselves be protected by ipsec) is probably the fastest option at present on OpenBSD. Hrmm. And then I try it... Does anyone actually have this working and if so would they mind sharing

Re: multilink VPN

2009-05-31 Thread Stuart Henderson
On 2009-05-31, Stuart Henderson s...@spacehopper.org wrote: On 2009-05-29, Stuart Henderson s...@spacehopper.org wrote: OSPF over gre's or gif's (which can then themselves be protected by ipsec) is probably the fastest option at present on OpenBSD. Hrmm. And then I try it... Does anyone

Re: multilink VPN

2009-05-31 Thread Claudio Jeker
On Sun, May 31, 2009 at 01:13:25PM +, Stuart Henderson wrote: On 2009-05-31, Stuart Henderson s...@spacehopper.org wrote: On 2009-05-29, Stuart Henderson s...@spacehopper.org wrote: OSPF over gre's or gif's (which can then themselves be protected by ipsec) is probably the fastest

Re: multilink VPN

2009-05-31 Thread Stuart Henderson
On 2009-05-31, Claudio Jeker cje...@diehard.n-r-g.com wrote: On Sun, May 31, 2009 at 01:13:25PM +, Stuart Henderson wrote: On 2009-05-31, Stuart Henderson s...@spacehopper.org wrote: On 2009-05-29, Stuart Henderson s...@spacehopper.org wrote: OSPF over gre's or gif's (which can then

Re: multilink VPN

2009-05-31 Thread Stuart Henderson
On 2009-05-31, Stuart Henderson s...@spacehopper.org wrote: Uhm. The tunnel endpoints and the gre src and dest IPs are the same. I have a bad feeling about that. ahh, changing that gets me a lot further, thanks. gre's nasty hack to toggle the address's LSB isn't quite enough then; not a

Re: multilink VPN

2009-05-30 Thread Anathae Townsend
James Mackinnon wrote on Friday, May 29, 2009 6:25 PM Hi All Thanks for your feedback. The guy regarding the cisco is a CCIE so I tend to accept his statements quick enough.. In VPN, I am referencing it in general terms in the creation of a private network over a public network of

Re: multilink VPN

2009-05-29 Thread Toni Mueller
? FWIW, I've configured semi-multilink VPN in the past (before the CARP age), with this kind of setup: LAN1 --- FW{1,2} --- Internet --- FW{3,4} --- LAN2 with LAN1, FW1, FW2: my end FW3, FW4, LAN2: other end (not accessible to me) Manually switching between FW1 and FW2 usually took

Re: multilink VPN

2009-05-29 Thread Stuart Henderson
On 2009-05-29, Toni Mueller openbsd-m...@oeko.net wrote: On Wed, 27.05.2009 at 22:07:25 -0300, James Mackinnon jmackin...@devantec.com wrote: I need to setup redundant VPN's between these locations without the use of BGP. I have used sasync in the past, pfsync etc however, I have not tried

Re: multilink VPN

2009-05-29 Thread James Mackinnon
to the second IP. fun little project, very small to almost nil budget is the challange. Cheers James - Original Message - From: Stuart Henderson s...@spacehopper.org To: misc@openbsd.org Sent: Friday, May 29, 2009 7:37 PM Subject: Re: multilink VPN On 2009-05-29, Toni Mueller openbsd-m

Re: multilink VPN

2009-05-29 Thread Jussi Peltola
In cisco speak, with pretty pictures: http://www.cisco.com/en/US/tech/tk583/tk372/technologies_configuration_example09186a00800a43f6.shtml On OpenBSD, it works analoguously, except that it's much cleaner :) Just think of the ipsec secured gre tunnel as a wire from point A to B. Make two such

multilink VPN

2009-05-27 Thread James Mackinnon
Hi All Here is my situation and I am hoping for a little guidance on this one I have 2 locations, both with 2 fiber internet connections I need to setup redundant VPN's between these locations without the use of BGP. So, my setup would be something like this Location A Firewall 1 Connection