Problem with: OSPF thru netgraph & Gif Tunnels

From: Chris Bose (cbose_007_at_yahoo.com)
Date: 04/25/05

  • Next message: Julian Elischer: "Re: Problem with: OSPF thru netgraph & Gif Tunnels" 
    Date: Sun, 24 Apr 2005 22:41:31 -0700 (PDT)
To: freebsd-hackers@freebsd.org

    Hi All,

     

    I’m trying to setup a network between two locations over a WAN and I’m running into a wall when I try to get OSPF to talk over my WAN tunnel. I’ve realized that I’m not smart enough and need your help.

     

    The problem is as follows:

    My network consists of the following:

    Site A connects together with a few quagga routers on freebsd 4.8

    Site A:

       Router 1: FXP0 (10.1.1.1/24)

       Router 1: FXP0 (10.1.2.1/24)

       Router 1: FXP0 (10.1.3.1/24)

       Router 1: GIF0 (10.1.4.1 -> 10.2.4.1)

     

    Site B connects to site A by using the GIF interface over the public network

     

    SiteB:

    Router 2: FXP0 (10.2.1.1/24)

    Router 2: FXP0 (10.2.2.1/24)

    Router 2: FXP0 (10.2.3.1/24)

    Router 2: GIF0 (10.2.4.1 -> 10.1.4.1)

     

     

    I run OSPFv2 (quagga) at Site A and at Site B. There is no problem connecting site A & B together via OSPF over the GIF0 tunnel. Essential OSPF multicasts its route advertisements thru the GIF tunnel to the other side. This works fine because the OSPF router and the GIF tunnel are both on the same freebsd computer

     

    Now here is what I’m trying to do to setup site C.

     

    At site C I need to separate this into two computers. Once computer will terminate the GIF tunnel and the other computer runs the OSPF router.

     

    So the setup between A and B looks like this:

     

    SiteA:Computer 1 SiteB:Computer 2

    (OSPF + GIF0) ============== (GIF0 + OSPF)

     

    And setup between Site B and C looks like this:

     

     

    SiteB:Computer 2 SiteC:Computer 3 SiteC:computer 4

    (OSPF + GIF1) ============== (GIF1) ---------(OSPF)

     

    === denotes GIF tunnel

    --- denotes normal Ethernet connection

    Computer 3 has two ethernet interfaces

     

     

    The problem that I have is I can’t get Computer 4 to communicate to computer 2 thru the GIF. The computers can ping each other, but the OSPF multicast packets don’t go thru.

    I have tried IPFW fwd commands on computer 3

    >Ifpw fwd computer 2 ip from computer 4 to any

    But that didn’t work

    I’ve tried Ethernet bridging… but bridging doesn’t work on a Gif interface.

    I’ve tried to replace the gif tunnel with Netgraph UDP tunnel, but I can’t use that in the bridge either.

     

    I used the sample in /src/examples/netgraph/bridge.

     

    I have not tried L2TPv3…

     

     

    So my question is how to get the above configuration working. I think this should be really simple to do, it’s a typical configuration as far as I can tell. Please show your ingenuity with your reply. I really appreciate it.

     

    I tried to make the example generic without any configuration files because there is nothing specific about my configuration. Please post your own configuration for the above if applicable. You can assume that I have a virgin computer and I can configure it any which way I want. If you need me to give you any configuration please let me know. If you want me to post a better network diagram please let me know as well.

     

    Many thanks,

    Chris.

     

    __________________________________________________
    Do You Yahoo!?
    Tired of spam? Yahoo! Mail has the best spam protection around
    http://mail.yahoo.com
    _______________________________________________
    freebsd-hackers@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-hackers
    To unsubscribe, send any mail to "freebsd-hackers-unsubscribe@freebsd.org"

  • Next message: Julian Elischer: "Re: Problem with: OSPF thru netgraph & Gif Tunnels"

    Relevant Pages

    • Re: Problem with: OSPF thru netgraph & Gif Tunnels
      ... > I’m trying to setup a network between two locations over a WAN and I’m ... > multicasts its route advertisements thru the GIF tunnel to the other side. ...
      (freebsd-hackers)
    • RE: Securing a Local Network
      ... Show the Management of your company the insecurity of the Peer to Peer ... setup and discuss what risks are they willing to accept. ... -Cost of getting the web server and the mail server internally versus having ... -Use an older box for Intrusion Detection on the internal network as well. ...
      (Security-Basics)
    • Re: Client computer wont connect to internet ATTN: Joe Crown
      ... for my host/client setup. ... >When I supported Windows 98 & Windows ME the most common cause of ... >> When I try to connect to the internet using Firefox or Internet ... >> 7) In the Manufacturers box, click Microsoft, in the Network Protocols ...
      (microsoft.public.windowsxp.network_web)
    • Re: Network Connections x 2 PCs
      ... The setup is quite ... >>> If you have a broadband router, run XP's Network Setup Wizard on both ... tell it that the computers connect to the ... >>> If you have a hub, the setup depends on how many IP addresses you get ...
      (microsoft.public.windowsxp.general)
    • RE: Site-to-Site VPN not working
      ... I was looking through my documentation on this setup. ... In ISA on the remote server, add a site-to-site VPN using the name of the ... add a Network Rule called REMOTEOFFICE to route ...
      (microsoft.public.isa)