(usagi-users 01094) Re: Strange Problems

[YOSHIFUJI Hideaki / 吉藤英明 <yoshfuji@xxxxxxxxxxxxxx>]

In article <5.1.0.14.0.20011221015839.00b07ce0@xxxxxxxxx> (at Fri, 21 Dec 2001 02:07:48 +0100), Marcus Buettemeyer <marcus@xxxxxxxxxxxxxxx> says:

> At 09:48 21.12.2001 +0900, YOSHIFUJI Hideaki / 
> =?iso-2022-jp?B?GyRCNUhGIzFRTEAbKEI=?= wrote:
> > > PING quake.ipv6.viagenie.qc.ca(quake.ipv6.viagenie.qc.ca) 56 data bytes
> > >  From holygate.holylane.de: Destination unreachable: Address unreachable
> > > [....and so on...]
> > > ---
> > > If I start the Script ON my Gateway (holygate.holylane.de which originates
> > > the above ICMPv6 errors) all works fine, I reach both Server. AFTER I've
> > > done it on the Gateway it ALSO works on the host behind the Gateway...but
> > > only for a limited period of time....
> >
> >please be sure to use usagi-20011210-linux24 (or later).
> 
> On the Gateway machine? I would like to avoid this, since the kernel is 
> already patched for FreeS/WAN and LVM ... and both subsystems are in 
> productive use ;-))
 
Of course, on gateway machine.


> But I definitively need IPsec (FreeS/WAN and PGPnet compatible) on the 
> Gateway and since I only have a single IP I cannot use 2 different 
> Gateways...Any experiences here?

you can setup static NAT on your IPv4 gateway for ipv6/ipv4;
forward protocol 41 over ipv4 packet to another ipv6/ipv4 gateway machine.

--yoshfuji