Skip site navigation (1)Skip section navigation (2)
Date:      Sun, 3 Apr 2005 18:46:19 +0200
From:      Martin Schweizer <lists_freebsd@bluewin.ch>
To:        freebsd-questions@freebsd.org
Subject:   VPN with setkey
Message-ID:  <20050403164619.GQ82075@saturn.pcs.ms>

next in thread | raw e-mail | index | archive | help

--vJnATpogyuudK3Na
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

Hello

I've been run in troubles with setkey. My goal is to etablish a vpn connect=
ion=20
with setkey/racoon to an vpn box from ZyXEL (Prestige 600series). My setup =
is:

notebook ---> FreeBSD gateway/firewall ---> Internet -----> ZyXEL

Notebook: 192.168.50.55
FreeBSD gatewy/firewall: 192.168.50.1
ZyXEL: host.abc.net (internal net: 192.168.1.0/24)

I can ping ZyXEL make vpn connections with a Windows client without problem=
s.=20
I config the ipsec.conf with these options:

spdadd -n 192.168.50.0/24 192.168.1.0/24 ipencap -P out ipsec esp/tunnel/19=
2.168.50.55-host.abc.net/require;
spdadd 192.168.1.0/24 192.168.50.0/24 ipencap -P in ipsec esp/tunnel/host.a=
bc.net-192.168.50.55/require;

and this I get back from setkey:

notebook# setkey -f ipsec.conf
libipsec: invalid IP address while parsing "host.abc.net"
line 1: hostname nor servname provided, or not known at [ out ipsec esp/tun=
nel/192.168.50.55-host.abc.net/require
parse failed, line 1.

What I'm doing wrong?
--=20

Regards

Martin Schweizer
<info@pc-service.ch>

PC-Service M. Schweizer GmbH; Bannholzstrasse 6; CH-8608 Bubikon
Tel. +41 55 243 30 00; Fax: +41 55 243 33 22; http://www.pc-service.ch;
public key : http://www.pc-service.ch/pgp/public_key.asc;=20
fingerprint: EC21 CA4D 5C78 BC2D 73B7  10F9 C1AE 1691 D30F D239;


--vJnATpogyuudK3Na
Content-Type: application/pgp-signature
Content-Disposition: inline

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.7 (FreeBSD)

iD8DBQFCUB3bwa4WkdMP0jkRAmFiAKDt86pkxBvA/jL7ogLSvUwYEgRJ7wCeIMMU
wcI6rk4espqYjk45bHgCpIs=
=nfZu
-----END PGP SIGNATURE-----

--vJnATpogyuudK3Na--



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20050403164619.GQ82075>