ipsec/gif(4) tunnel not working: traffic not appearing on the gif(4) interface after deciphering

Tue Mar 26 12:38:37 UTC 2019

26.03.2019 14:26, Eugene M. Zheganin wrote:

> I have a FreeBSD 11.1 box with 2 public IPs that has two tunnels to another FreeBSD box with 1 public IP. One of these tunnels is working, the other isn't. Long story short: I have some experience in ipsec tunnels setup. and I supposed that have configured everything properly, and to illustrate this I've loaded if_enc(4) on the 11.1 and it does show the traffic for the second gif:

[skip]

> Any ideas ?

Always add "link2" to ifconfig_gifX configuration in such cases:

ifconfig_gif0="inet 192.168.254.25 192.168.254.26 netmask 255.255.255.252 mtu 1500 link2"

Refer to gif(4) manual page for details, look for IFF_LINK2 description.