The following reply was made to PR kern/21079; it has been noted by GNATS.

From: Brian Candler <B.Ca...@pobox.com> To: free...@FreeBSD.org Cc: Subject: Re: kern/21079: IPSEC, kernel ARPs for tunnel endpoint instead of
next-hop gateway Date: Wed, 6 Sep 2000 17:26:18 +0100

[And the last part of the description should read as:]

arp -an shows: ? (g.g.g.g) at (incomplete) [ethernet]

where g.g.g.g is R1's IP address on the link to A, i.e. A's default gateway.

Connectivity is lost until you manually do # arp -d g.g.g.g # ping g.g.g.g

At this point the IPSEC packets start to flow, until the ARP cache expires
again.

To Unsubscribe: send mail to majo...@FreeBSD.org with "unsubscribe freebsd-bugs" in the body of the message