Subject: Re: VPN and routing
To: Michael Richardson <mcr@sandelman.ottawa.on.ca>
From: George Abdelmalik <gabdelmalik@avdat.com.au>
List: current-users
Date: 10/18/2007 09:30:32
On Thursday 18 October 2007 01:24, Michael Richardson wrote:
> >>>>> "Matthias" == Matthias Scheler <tron@zhadum.org.uk> writes:
>
> Matthias> [This really belongs on "tech-net@NetBSD.org]
>
> Matthias> On Mon, Oct 15, 2007 at 02:08:53PM -0500, Steve Pribyl
>
> Matthias> wrote:
> >> How do I get my netbsd box to route on the same network?
> >>
> >> 192.168.0.0/24--->[netbsd box 192.168.0.1] ^
> >>
> >> [via IPSEC VPN 192.168.0.200/24]--|
> >>
> >> The netbsd box is running 4.0 rc2 racoon and pf.
> >>
> >> How do I get the netbsd box to "listen" for vpn destine traffic,
> >> or is this just not the way to do it.
>
> Matthias> Is that your problem?
>
> I don't think you got it.
>
> I think he has extruded the IP 192.168.0.200 to this remote machine.
> The gateway is 192.168.0.1. The question is, how can he make
> 192.168.0.1 pick up packets for .200 and send them over the link.
> The answer is proxy-arp.
Yes thats what I would try. On the 192.168.0.1 machine do:
# arp -s 192.168.0.200 MAC_ADDR_OF_192.168.0.200
Also see arp(8) for all the details.
-
george.