From owner-freebsd-questions  Sun Mar 11 20:39:24 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from smtp.whitebarn.com (Spin.whitebarn.com [216.0.13.113])
	by hub.freebsd.org (Postfix) with ESMTP
	id E510F37B718; Sun, 11 Mar 2001 20:39:18 -0800 (PST)
	(envelope-from Bob@Talarian.Com)
Received: from Talarian.Com (Relent.Bob.whitebarn.com [216.0.13.50])
	by smtp.whitebarn.com (8.9.3/8.9.3) with ESMTP id WAA16567;
	Sun, 11 Mar 2001 22:39:17 -0600 (CST)
	(envelope-from Bob@Talarian.Com)
Message-ID: <3AAC52F4.1000602@Talarian.Com>
Date: Sun, 11 Mar 2001 22:39:16 -0600
From: Bob Van Valzah <Bob@Talarian.Com>
User-Agent: Mozilla/5.0 (X11; U; Linux 2.2.12 i386; en-US; 0.8) Gecko/20010215
X-Accept-Language: en
MIME-Version: 1.0
To: FreeBSD-Security@FreeBSD.Org
Cc: FreeBSD-Questions@FreeBSD.Org
Subject: Racoon Problem & Cisco Tunnel
Content-Type: text/plain; charset=us-ascii; format=flowed
Content-Transfer-Encoding: 7bit
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.ORG

I have several remote FreeBSD users who want to connect their home LANs 
to my trusted network over an IPSec tunnel via a DSL connection. I'd 
like my end of the tunnel to terminate on a Cisco if possible. (Though I 
do have many FreeBSD boxes handy, I just feel better when layer-2 
infrastructure doesn't depend on boxes with hard drives.) Any general 
advice on how to do this would be appreciated.

As near as I can tell, I have to run racoon and configure it for 
pre-shared keys to talk to the cisco. But I don't think the racoon is 
even starting right. I get this message: "ERROR: 
pfkey.c:207:pfkey_handler(): pfkey X_SPDDUMP failed No such file or 
directory." Happens with the config files I've written and the stock 
ones. I'm running a freshly sup'd box with racoon-20010222a built from 
ports.

All help and advice appreciated.

   Thanks,

   Bob


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message