Date: Wed, 18 May 2005 04:48:35 -0300 From: "Juan Priotti" <jpriotti@gmail.com> To: "mohan chandra" <mohanchandra_01@yahoo.co.in>, <freebsd-security@freebsd.org> Subject: Re: HOW TO Enable IPSec for FreeBSD.......??? Message-ID: <007701c55b7e$198216d0$37d57ec8@pvy2m1gtzlxqq2x> References: <20050518073122.21373.qmail@web8505.mail.in.yahoo.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Have you tried this: http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/ipsec.html it worked for me Juan ----- Original Mes sage ----- From: "mohan chandra" <mohanchandra_01@yahoo.co.in> To: "Danil V. Gerun" <news@625.ru>; <freebsd-security@freebsd.org>; <alex@camulus.com>; <mike@sentex.net> Sent: Wednesday, May 18, 2005 4:31 AM Subject: Re: HOW TO Enable IPSec for FreeBSD.......??? > Hi Danil, > > Thanks to all for replying.. > > I executed (build) the kernel with hte propely > commands by changing the "GENERIC" with "MYKERNEL" at > the "ident" option. > > #commands used are > make buildkernel KERNCONF=MYKERNEL > make installkernel KERNCONF=MYKERNEL && reboot > > But still ipsec support is not there. If ipsec exists > the file ipsec.conf should be there under " /etc " > folder,but it is not there.. > > I found ' MYKERNEL ' folder under the following > directory: > > :/usr/obj/usr/src/sys/MYKERNEL > > It contains so many object files and C-header files, > In that ipsec.o, ipsec.h and other ipsec related file > like esp,ah etc., are appearing. > > So with this can I do anything to add ipsec, Please > reply me soon. > > Also I tried using 'setkey' to find the ipsec support > with following commands and I got the following > output: > ------------------------- > mohan# setkey -D > No SAD entries. > mohan# setkey -DP > No SPD entries. > mohan# > -------------------------- > > And atlast can I use any ipsec patches for FreeBSD. > So, please suggest me any sort of solution to get > ipsec on my FreeBSD (4.11) > > with Regards, > > Mohan.. > > > --- "Danil V. Gerun" <news@625.ru> wrote: > > mc> /usr/src/sys/i386/conf/MYKERNEL > > ... > > mc> # cd /usr/src > > mc> # make buildkernel KERNCONF=IPSEC && make > > mc> installkernel KERNCONF=IPSEC > > > > If this is what you've really done, then you should > > do > > > > make buildkernel KERNCONF=MYKERNEL > > make installkernel KERNCONF=MYKERNEL > > > > > > And you can also change the 'ident' option in the > > kernel to the > > ident MYKERNEL > > > > > > > > -- > > Best regards, Danil V. Gerun > > danil@hate.spam.625.ru > > > > _______________________________________________ > > freebsd-security@freebsd.org mailing list > > > http://lists.freebsd.org/mailman/listinfo/freebsd-security > > To unsubscribe, send any mail to > > "freebsd-security-unsubscribe@freebsd.org" > > > > mohan chandra wrote: > > Hi, > > > > I have tried to enable IPSec support for my > > FreeBSD( 4.11-RELEASE) system. > > First, I copied the generic kernel configuration > file > > to a file I called MYKERNEL: > > > > #cp /usr/src/sys/i386/conf/GENERIC > > /usr/src/sys/i386/conf/MYKERNEL > > > > > > Then, I added the following three lines to the > options > > section of /usr/src/sys/i386/conf/MYKERNEL: > > > > options IPSEC > > options IPSEC_ESP > > options IPSEC_DEBUG > > > > After that I recompile the kernel with the following > > command: > > > > # cd /usr/src > > # make buildkernel KERNCONF=IPSEC && make > > installkernel KERNCONF=IPSEC > > > > And also installed IKE support on my system with the > > following command using racoon: > > > > cd /usr/ports/security/racoon > > make install clean > > > > Afterall completion of build, still IPSec support is > > not appearing in the system. Suggest me,is there any > > configuration or modifications need to be done? > > > > Please, anyone give me some suggestion to enable > IPSec > > support on FreeBSD. > > Any Help will be very much appeciated.. > > > > Thanx, > > > > Regards, > > Mohan.. > > ________________________________________________________________________ > Yahoo! India Matrimony: Find your life partner online > Go to: http://yahoo.shaadi.com/india-matrimony > _______________________________________________ > freebsd-security@freebsd.org mailing list > http://lists.freebsd.org/mailman/listinfo/freebsd-security > To unsubscribe, send any mail to "freebsd-security-unsubscribe@freebsd.org"
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?007701c55b7e$198216d0$37d57ec8>