Well I think maybe Brian Kantor has simplified the IPIP <-> BGP
connectivity dilemma for everyone.
I was able to ping
hamwan.org earlier. It's not working right now, so
I'll assume there are some bugs still being worked out.
So really what I am about to share may no longer be needed, but I'll
share it for informational purposes.
Recap:
Last month I shared an idea for someone where I had cooked up a way
for some hosts on his RF LAN to be reachable via UCSD, and the rest
masq'd.
http://www.qsl.net/kb9mwr/wapr/tcpip/startampr-n3fe
To which PE1CHL replied he does something similar, but he use the mark
to enable the masquerading
So that got me thinking maybe this same concept could be applied to
the BGP'd subnets, forcing them to use masquerading. But rather a
rule on the source address, we set it for destinations.
Here is what I came up with. (Untested)
http://www.qsl.net/kb9mwr/wapr/tcpip/startampr-bgp
Basically I download a list of all the BGP'd subnets, and set a flag
like before and force them out as masqueraded.