Date: Mon, 12 Nov 2001 16:57:39 -0800 (PST) From: Lamont Granquist <lamont@scriptkiddie.org> To: FreeBSD Security List <freebsd-security@FreeBSD.ORG> Subject: Bump-in-the-Road IPsec? Message-ID: <20011112164936.F538-100000@coredump.scriptkiddie.org> In-Reply-To: <3BF00B66.11A3F4AF@algroup.co.uk>
next in thread | previous in thread | raw e-mail | index | archive | help
I'm trying to implement a transparent IPsec gateway and am wondering if I
can make it work under FreeBSD? What I want is a transparent bridge which
will encrypt communications between a set of machines on two different
subnets with real IP numbers. Something like:
other servers
|
Server1 -- SG1 --+-- Router - - - INET - - - Router --- SG2 --- Server2
Server1 should have a real IP address, SG1 should have at least one real
IP address on one of its interfaces for administration. Server1 should be
able to talk to the other servers on its subnet with SG1 acting like a
transpart bridge. Server1 should also be able to talk to machines on the
internet through the router, unecrypted. However, for talking to Server2
(also with a real IP address) the traffic should go between SG1 and SG2
encrypted.
I've tried doing this with OpenBSD and have run into a problem in that I
can setup the transparent bridge, but from SG1 i cannot connect to
Server1 (the routing tables and the bridging tables don't seem to
communicate with each other).
Can I make something like this work under FreeBSD and what kind of magic
do I need to do?
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20011112164936.F538-100000>