Date: Mon, 21 May 2001 12:22:53 -0500 From: "David W. Chapman Jr." <dwcjr@inethouston.net> To: "Brandt Everett" <everett@bentonrea.com>, <freebsd-stable@FreeBSD.ORG> Subject: Re: ESP between two FreeBSD boxes Message-ID: <01cc01c0e21a$ab230540$931576d8@inethouston.net> References: <002e01c0e21a$342dd5a0$632807d8@prosser.bentonrea.org>
next in thread | previous in thread | raw e-mail | index | archive | help
Do you have a firewall setup. If so you have to allow all ip traffic from one to the other on boths sides. ie allow all from 192.168.0.0/24 to 192.168.1.0/24 allow all from 192.168.1.0/24 to 192.168.0.0/24 ----- Original Message ----- From: "Brandt Everett" <everett@bentonrea.com> To: <freebsd-stable@FreeBSD.ORG> Sent: Monday, May 21, 2001 12:19 PM Subject: ESP between two FreeBSD boxes > I am trying to setup a simple encrypted communication between two machines, > but when ever I set it up, communication stops between them. Below are my > setkey commands. I am at a loss. Can anyone help me out? > > Thanks > > Brandt Everett > > -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- > phone: 1-800-398-1232 x 234 > webpage: www.bentonrea.com > -=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- > > > > Machine A > /usr/sbin/setkey -c << EOF > spdadd ${boxcar} ${hercules} any -P out ipsec > esp/transport/${boxcar}-${hercules}/require; > spdadd ${hercules} ${boxcar} any -P in ipsec > esp/transport/${hercules}-${boxcar}/require; > add ${boxcar} ${hercules} esp 12345 -E blowfish-cbc "somethingsecret"; > add ${hercules} ${boxcar} esp 12346 -E blowfish-cbc "somethingsecret"; > EOF > > > Machine B > /usr/sbin/setkey -c << EOF > spdadd ${hercules} ${boxcar} any -P out ipsec > esp/transport/${hercules}-${boxcar}/require; > spdadd ${boxcar} ${hercules} any -P in ipsec > esp/transport/${boxcar}-${hercules}/require; > add ${boxcar} ${hercules} esp 12345 -E blowfish-cbc "somethingsecret"; > add ${hercules} ${boxcar} esp 12346 -E blowfish-cbc "somethingsecret"; > EOF > > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-stable" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-stable" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?01cc01c0e21a$ab230540$931576d8>