Date: Sat, 21 May 2011 16:59:25 -0500 From: jhall@socket.net To: claudiu.vasadi@gmail.com, freebsd-questions@freebsd.org Subject: Re: Re: IPSec routing (long post) Message-ID: <20110521215926.B95571065673@hub.freebsd.org> References: <20110521143347.215E2106564A@hub.freebsd.org> <BANLkTi=TeH5jd6hbdX4KasosPR0mUYBrhQ@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
---------------------------------------------------- >From : claudiu vasadi <claudiu.vasadi@gmail.com> To : jhall@socket.net Subject : Re: IPSec routing (long post) Date : Sat, 21 May 2011 18:45:07 +0200 Some additional points: > - have you been following the FreeBSD handbook on this ? -> > http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/ipsec.html > - pls post your ifconfig interface settings > - you can use "tcpdump" to sniff traffic off of your "real" network > interface (tcpdump (-v) -i <interface> host <vendor_ext_IP> and dst > <local_ext_IP>) > - do you have "options IPSEC" and "device crypto" in your kernel ? My understanding is the handbook was using tunnel mode to connect the networks, and I am using transport mode. Are these the same, and I am misunderstanding what I am reading. Jay
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20110521215926.B95571065673>