2010/5/23 Martin Pelikan <martin.pelikan@gmail.com>:
quoted text
> 2010/5/22, Don Reis <reisdond@gmail.com>:
>> I have the idea that to make DHCP work over IPSec on my VPN gateway, I
have
quoted text
>> to make dhcpd listen on lo0, and then have dhcrelay listen on enc0 and
relay
quoted text
>> to lo0.  (dhcpd runs on same machine)
>>
>> Why doesn't dhcrelay find enc0?  And Is this the proper way to make this
>> work?
>>
>
> This is where bridge(4) and the new vether(4) device comes handy...
> Set it up to listen on vether, set the proposed DHCP server IP address
> to vether too and bridge it (or find another solution)

Just to make sure I understand you correctly, you are suggesting I
make dhcpd listen on vether0 (ip address of dhcpd server on vether0)
and then add enc0 and vether0 to bridge0?

Also, just for my knowledge, why doesn't dhcrelay like enc0 being fed
to it?  It seems from the man page that this is a supported
configuration.

quoted text
>
> --
> Martin Pelikan