Re: Tunneling Semantics - Owner?

Olaf Titz (olaf@bigred.inka.de)
Thu, 12 Nov 1998 17:16:40 +0100

> The problem is that when you do "ifconfig tunl0 ipaddr p-t-p otherend",
> the recent Linux kernels also installs the route to "otherend" via tunl0,
> which is certainly not the right thing - you want the other end of the
> tunnel to be reachable via normal interfaces/routes (to which you can send
> the encapsulated packets).

Depends on what you want to do with the tunnel. For VPN-like or mobile
applications, you can (and should) separate the carrier from the
payload into two different routing areas. E.g. you can have a tunnel
10.0.0.1 <-> 10.1.0.1 residing on hosts whose "real" addresses are
129.something and 205.something, and in this case the automatic kernel
route makes as perfect sense as the P-t-P-ness. See the CIPE docs on
setting up VPNs if this isn't clear.

Olaf

-
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@vger.rutgers.edu
Please read the FAQ at http://www.tux.org/lkml/