Broken gif interface for IPV4 over IPV4 tunnel on FreeBSD
4.5-Release-P6
Aaron Burke
aburke at nullplusone.com
Sat Oct 11 03:02:49 PDT 2003
Hello Questions List,
(please cc, as I may not be on this list, (Too many daily messages))
I have previously setup a gif interface on a box called GM
using pseudo-device gif. I have tried several things to get the
gif interface back up and working. I will list them all in this
email. On an other note, the kernel source files used to be
located in the default /usr/src/sys/ have been moved to
/a/usr/src/sys/ (RAID5 on 3ware IDE RAID controller). If anyone
is interested in the details of the move I can paste them in if
people are intersted. And for the conveiniance of the person that
has physical access to the box, I symlinked /a/usr/src/sys to
/usr/src/sys .
The kernel was rebuilt the other day to add in support for
IPSEC and IPSEC_ESP to encrypt the connections. Since rebuilding
gif device no longer works. I have tried removing the IPSEC stuff
and rebuilding and go figure the gif device still doesnt work. So
I broke it, tried removing my changes, and its still broken.
I double-checked and "pseudo-device gif" is still in the kernel
config file.
I want to make it clear to everyone that I did have this working
in the past. I also dont have physical access to the box, so an
upgrade is not possible. (Plus, why upgrade something that has
worked in the past.)
And now for the problem:
gif0 does not show up in ifconfig, so I have tried creating the
device with methods that work on three other FreeBSD boxes
(4.8-stable from July 29th, 2003, and two 4.7-release boxes)
GM# ifconfig gif0 create
ifconfig: interface gif0 does not exist
Greenmantis# gifconfig gif0 local.public.ip.address remote.public.ip.address
gifconfig: interface gif0 does not exist
Greenmantis# ifconfig gif0 inet 10.1.1.2 192.168.0.2
ifconfig: interface gif0 does not exist
Where as on all of my other boxes, I dont get "gifconfig:
interface gif0 does not exist". It just silently creates the
device and returns me to the prompt.
I am really currious about why it worked before, but doesnt work now.
And to have other people double-check the kernel source file on
the busted machine, I will paste it here. Some confidential info has
been changed for privacy)
#
# GM - GM's kernel configuration file.
# $FreeBSD: src/sys/i386/conf/GENERIC,v 1.246.2.38 2002/01/25 17:41:40
murray Exp $
machine i386
cpu I686_CPU
ident GM
maxusers 0
#makeoptions DEBUG=-g #Build kernel with gdb(1) debug
symbols
options INET #InterNETworking
options INET6 #IPv6 communications protocols
options FFS #Berkeley Fast Filesystem
options FFS_ROOT #FFS usable as root device [keep
this!]
options SOFTUPDATES #Enable FFS soft updates support
options UFS_DIRHASH #Improve performance on big
directories
options MFS #Memory Filesystem
#options MD_ROOT #MD is a potential root device
#options NFS #Network Filesystem
#options NFS_ROOT #NFS usable as root device, NFS
required
options MSDOSFS #MSDOS Filesystem
options CD9660 #ISO 9660 Filesystem
#options CD9660_ROOT #CD-ROM usable as root, CD9660
required
options PROCFS #Process filesystem
options COMPAT_43 #Compatible with BSD 4.3 [KEEP
THIS!]
#options SCSI_DELAY=15000 #Delay (in ms) before probing SCSI
options UCONSOLE #Allow users to grab the console
options USERCONFIG #boot -c editor
options VISUAL_USERCONFIG #visual boot -c editor
options KTRACE #ktrace(1) support
options SYSVSHM #SYSV-style shared memory
options SYSVMSG #SYSV-style message queues
options SYSVSEM #SYSV-style semaphores
options P1003_1B #Posix P1003_1B real-time extensions
options _KPOSIX_PRIORITY_SCHEDULING
options ICMP_BANDLIM #Rate limit bad replies
options KBD_INSTALL_CDEV # install a CDEV entry in /dev
options SUIDDIR #SMB support, its my file, I can del
it
options IPFIREWALL
options IPDIVERT
# secure VPN functionallity (were added for IPSEC secure transport)
# options IPSEC #IP security
# options IPSEC_ESP #IP security (crypto; define w/ IPSEC)
# To make an SMP kernel, the next two are needed
#options SMP # Symmetric MultiProcessor Kernel
#options APIC_IO # Symmetric (APIC) I/O
device isa
device eisa
device pci
# Floppy drives
device fdc0 at isa? port IO_FD1 irq 6 drq 2
device fd0 at fdc0 drive 0
device fd1 at fdc0 drive 1
# ATA and ATAPI devices
device ata0 at isa? port IO_WD1 irq 14
device ata1 at isa? port IO_WD2 irq 15
device ata
device atadisk # ATA disk drives
device atapicd # ATAPI CDROM drives
#device atapifd # ATAPI floppy drives
#device atapist # ATAPI tape drives
options ATA_STATIC_ID #Static device numbering
# SCSI peripherals
device scbus # SCSI bus (required)
#device da # Direct Access (disks)
#device sa # Sequential Access (tape etc)
device cd # CD
#device pass # Passthrough device (direct SCSI access)
# RAID controllers interfaced to the SCSI subsystem
#device asr # DPT SmartRAID V, VI and Adaptec SCSI RAID
#device dpt # DPT Smartcache - See LINT for options!
#device mly # Mylex AcceleRAID/eXtremeRAID
# RAID controllers
device twe # 3ware Escalade
# atkbdc0 controls both the keyboard and the PS/2 mouse
device atkbdc0 at isa? port IO_KBD
device atkbd0 at atkbdc? irq 1 flags 0x1
device psm0 at atkbdc? irq 12
device vga0 at isa?
# splash screen/screen saver
pseudo-device splash
# syscons is the default console driver, resembling an SCO console
device sc0 at isa? flags 0x100
# Enable this and PCVT_FREEBSD for pcvt vt220 compatible console driver
#device vt0 at isa?
#options XSERVER # support for X server on a vt
console
#options FAT_CURSOR # start with block cursor
# If you have a ThinkPAD, uncomment this along with the rest of the PCVT
lines
#options PCVT_SCANSET=2 # IBM keyboards are non-std
# Floating point support - do not disable.
device npx0 at nexus? port IO_NPX irq 13
# Power management support (see LINT for more options)
device apm0 at nexus? disable flags 0x20 # Advanced Power
Management
# Serial (COM) ports
device sio0 at isa? port IO_COM1 flags 0x10 irq 4
device sio1 at isa? port IO_COM2 irq 3
# Parallel port
device ppc0 at isa? irq 7
device ppbus # Parallel port bus (required)
device lpt # Printer
#device plip # TCP/IP over parallel
#device ppi # Parallel port interface device
#device vpo # Requires scbus and da
# PCI Ethernet NICs.
#device de # DEC/Intel DC21x4x (``Tulip'')
#device txp # 3Com 3cR990 (``Typhoon'')
#device vx # 3Com 3c590, 3c595 (``Vortex'')
# PCI Ethernet NICs that use the common MII bus controller code.
# NOTE: Be sure to keep the 'device miibus' line in order to use these NICs!
device miibus # MII bus support
device fxp # Intel EtherExpress PRO/100B (82557, 82558)
# Pseudo devices - the number indicates how many units to allocate.
pseudo-device loop # Network loopback
pseudo-device ether # Ethernet support
#pseudo-device sl 1 # Kernel SLIP
#pseudo-device ppp 1 # Kernel PPP
#pseudo-device tun # Packet tunnel.
pseudo-device pty # Pseudo-ttys (telnet etc)
#pseudo-device md # Memory "disks"
pseudo-device gif # IPv6 and IPv4 tunneling
#pseudo-device faith 1 # IPv6-to-IPv4 relaying (translation)
# The `bpf' pseudo-device enables the Berkeley Packet Filter.
# Be aware of the administrative consequences of enabling this!
pseudo-device bpf #Berkeley packet filter
# USB support
#device uhci # UHCI PCI->USB interface
#device ohci # OHCI PCI->USB interface
#device usb # USB Bus (required)
#device ugen # Generic
#device uhid # "Human Interface Devices"
#device ukbd # Keyboard
#device ulpt # Printer
#device umass # Disks/Mass storage - Requires scbus and da
#device ums # Mouse
#device uscanner # Scanners
#device urio # Diamond Rio MP3 Player
# USB Ethernet, requires mii
#device aue # ADMtek USB ethernet
#device cue # CATC USB ethernet
#device kue # Kawasaki LSI USB ethernet
More information about the freebsd-questions
mailing list