Comments on: Как настроить IP-IP-тунель между FreeBSD и Linux

By: Felipe Alfaro Solana

Felipe Alfaro Solana — Thu, 04 Dec 2008 18:40:42 +0000

Using an MTU of 1,500 on the tun0 will likely cause fragmentation issues.

Typically, Ethernet maximum frame size is 1,500 bytes. MTU reflects the maximum payload that will fit in the Layer 2 without causing fragmentation. If you use an MTU of 1,500 for tun0, your encapsulating IP datagram will likely be fragmented because you are not accounting for the overhead of the encapsulation.

When using IP-over-IP, you need to discount 20 bytes for the encapsulating IP header. This means you should use an MTU of 1,480 and not 1,500. If you want to use GRE, you also need to deduct the size of the GRE header.

By: Алексей

Алексей — Fri, 19 Oct 2007 10:58:14 +0000

можно и нужно

By: Семён

Семён — Thu, 09 Aug 2007 09:11:27 +0000

Народ а расскажите можно ли теперь этот IP-тунель криптовать Racoon-ом???

By: jr

jr — Thu, 17 May 2007 15:26:31 +0000

Very good, I’ve tested just the linux part and it works fine.
MAny Thanks

By: LVS/TUN mode with FreeBSD and Solaris realserver « Catattan Seorang Geeks

LVS/TUN mode with FreeBSD and Solaris realserver « Catattan Seorang Geeks — Mon, 14 May 2007 16:11:50 +0000

[...] [3] http://blog.kovyrin.net/2006/03/17/how-to-create-ip-ip-tunnel-between-freebsd-and-linux/ [...]

By: tunnel

tunnel — Thu, 25 Jan 2007 01:47:18 +0000

In 5.x and 6.x the gifconfig command is included in the ifconfig command itself as an option “tunnel”.

By: Scoundrel

Scoundrel — Thu, 27 Jul 2006 14:31:11 +0000

I’ve tried it in 4.X, but I think, that this command should be in 5.X and 6.X. maybe they’ve changed its name… Try to use Google

By: rcayenne

rcayenne — Thu, 27 Jul 2006 07:39:04 +0000

For which version of FreeBSD is this example intented? I tryed it on 5.2.1 and there is no gifconfig command.

By: zenith

zenith — Fri, 09 Jun 2006 15:42:43 +0000

У меня вот возник вопрос: как быть если число серверов больше двух? Настраивать туннели попарно? Или можно это сделать по-другому? У меня 14 подсетей

By: Thomas Anderson

Thomas Anderson — Tue, 06 Jun 2006 07:26:53 +0000

# ifconfig tun0 10.0.0.1 netmask 255.255.255.252 \
> pointopoint 10.0.0.1

ошибочка – должно быть так:
ifconfig tun0 10.0.0.1 netmask 255.255.255.252 \
> pointopoint 10.0.0.2