From owner-freebsd-questions Wed Jun 27 9:59:12 2001 Delivered-To: freebsd-questions@freebsd.org Received: from simpurio.idealab.com (mx2.idealab.com [64.208.8.4]) by hub.freebsd.org (Postfix) with SMTP id 9CB5237B401 for ; Wed, 27 Jun 2001 09:59:08 -0700 (PDT) (envelope-from jim@compete.com) Received: (qmail 21712 invoked by alias); 27 Jun 2001 16:59:07 -0000 Received: (qmail 21670 invoked from network); 27 Jun 2001 16:59:07 -0000 Received: from unknown (HELO cartman.boston.geekhouse.net) (10.5.1.109) by simpurio.idealab.com with SMTP; 27 Jun 2001 16:59:07 -0000 Received: by cartman.boston.geekhouse.net (Postfix, from userid 1000) id 060B1324A; Wed, 27 Jun 2001 12:59:06 -0400 (EDT) Date: Wed, 27 Jun 2001 12:59:05 -0400 From: Jim Mock To: Gavin Kenny Cc: questions@freebsd.org Subject: Re: VPN setup Message-ID: <20010627125905.A2424@cartman.boston.geekhouse.net> Reply-To: jim@compete.com References: <20010627164434.51128.qmail@web20006.mail.yahoo.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: <20010627164434.51128.qmail@web20006.mail.yahoo.com> User-Agent: Mutt/1.3.19i Sender: owner-freebsd-questions@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.ORG On Wed, 27 Jun 2001 at 17:44:34 +0100, Gavin Kenny wrote: > Jim, > > Have you set up the Security Associations? > > you have used spdadd which sets up you security policy > (i.e. if you want to send a packet from A to B encrypt > it) > > But you also need the SA's to tell IPSec what > algorythms to use and what keys to use. It is dead > easy if you are prepared to set them up manually, lots > harder if you want to use IKE (so I'm told). Ah ha. I didn't do that. I wouldn't even have posted if I saw the link to the diary article (that's what I get for not reading my mail first, I guess :-). Thanks for the tip. - jim -- - jim mock www.compete.com - jim@FreeBSD.org - - senior systems administrator - Compete, Inc. - ph: 1.617.867.7035 - To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message