OpenForum RSS: �� ipsec �� dlink di-804hv � freebsd-7.0

�� ipsec �� dlink di-804hv � freebsd-7.0 (iceman_krs)

Fri, 05 Sep 2008 13:45:14 GMT

>[�� ]
>� 192.168.0.200 � �� :
>C:\Program Files\Support Tools>ping 192.168.1.1 -t
>
>�� 192.168.1.1 �� 32 ��:
>
>�� 192.168.1.1: �� =32 ��=8�� TTL=63
>�� 192.168.1.1: �� =32 ��=1�� TTL=633
>
>�� -�� :-(
>�� -�� ?..

� ��,� /var/log/messages �� 192.168.1.1 � �� :
Sep 5 21:42:51 gate0 kernel: arplookup 192.168.51.44 failed: host is not on local network
Sep 5 21:42:51 gate0 kernel: arpresolve: can't allocate route for 192.168.51.44
Sep 5 21:42:53 gate0 kernel: arplookup 192.168.51.44 failed: host is not on local network
Sep 5 21:42:53 gate0 kernel: arpresolve: can't allocate route for 192.168.51.44

�� ipsec �� dlink di-804hv � freebsd-7.0 (�� )

Fri, 05 Sep 2008 13:40:18 GMT

>[�� ]
>>
>>tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
>>
>>listening on gif0, link-type NULL (BSD loopback), capture size 96 bytes
>>19:46:12.981643 IP 192.168.1.180 > gate0: ICMP echo reply, id 13321, seq 125, length 64
>>19:46:14.016642 IP 192.168.1.180 > gate0: ICMP echo reply, id 13321, seq 126, length 64
>>19:46:15.050589 IP 192.168.1.180 > gate0: ICMP echo reply, id 13321, seq 127, length 64
>>
>
>� �� sudo tcpdump -i gif0 _DST_ host 192.168.1.180?

�� :-)
�� ,�� .� �� :
1)�� 192.168.1.0.24 �� 192.168.0.200 � ��
2)�� ,�� .
�� : sudo tcpdump -i gif0 _DST_ host 192.168.1.180
�� .
�� :-)
�� ipfw �� :
allow ip from 192.168.1.0/24 to 192.168.0.0/24 in via gif0
allow ip from 1

�� ipsec �� dlink di-804hv � freebsd-7.0 (DenSha)

Tue, 02 Sep 2008 12:58:59 GMT

�� .

1.
...
>�� 192.168.51.44,
>� �� 192.168.47.1.
>��,�� ,

...
��
>�� 192.168.47.1 �� 255.255.248.0
>�� 192.168.51.44 �� 255.255.248.0

47 � 51 � �� 248 �� .

� �� 0.200 �� 0.1 �� (�� win?) tracert 192.168.1.180.
� �� netstat -ra �� 0.200

>> sudo tcpdump -i gif0 host 192.168.1.180
>
>tcpdump: verbose output suppressed, use -v or -vv for full protocol decode
>
>listening on gif0, link-type NULL (BSD loopback), capture size 96 bytes
>19:46:12.981643 IP 192.168.1.180 > gate0: ICMP echo reply, id 13321, seq 125, length 64
>19:46:14.016642 IP 192.168.1.180 > gate0: ICMP echo reply, id 13321, seq 126, length 64
>19:46:15.050589 IP 192.168.1.180 > gate0: ICMP echo reply, id 13321, seq 127, length 64
>

� �� sudo tcpdump -i gif0 _DST_ hos

OpenForum RSS: �������� � ipsec �������� ����� dlink di-804hv � freebsd-7.0

�������� � ipsec �������� ����� dlink di-804hv � freebsd-7.0 (iceman_krs)

�������� � ipsec �������� ����� dlink di-804hv � freebsd-7.0 (������ ����������)

�������� � ipsec �������� ����� dlink di-804hv � freebsd-7.0 (DenSha)

OpenForum RSS: �� ipsec �� dlink di-804hv � freebsd-7.0

�� ipsec �� dlink di-804hv � freebsd-7.0 (iceman_krs)

�� ipsec �� dlink di-804hv � freebsd-7.0 (�� )

�� ipsec �� dlink di-804hv � freebsd-7.0 (DenSha)