Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 30 Oct 2003 09:15:32 +1100
From:      "Lachlan" <lachlan@fatpanda.net>
To:        "Nucleo de Pesquisa e Desenvolvimento" <npd@el.com.br>, <freebsd-net@freebsd.org>
Cc:        freebsd-isp@freebsd.org
Subject:   RE: IPSEC in tunnel mode ( possible? )
Message-ID:  <HCELIPBBEBGPLLIOIABMAEOGCEAA.lachlan@fatpanda.net>
In-Reply-To: <1545.172.72.12.252.1067458540.squirrel@intranet.el.com.br>

next in thread | previous in thread | raw e-mail | index | archive | help
I'm not sure if my guess is correct. But instead of using windows over
ipsec, i would use 2 FreeBSD boxes.


eg,

Client Host -- [ipsec on bsd] -- (( wirless )) -- [ipsec on bsd to
decrypt] -- (( internet ))


Not sure if that's what you're trying to do, was a little hard to
understand.


If that is the case, there is a nice article on freebsd diary that covers
this pretty well.

http://www.freebsddiary.org/ipsec.php

Regards,
	Lachlan

-----Original Message-----
From: owner-freebsd-isp@freebsd.org
[mailto:owner-freebsd-isp@freebsd.org]On Behalf Of Nucleo de Pesquisa e
Desenvolvimento
Sent: Thursday, October 30, 2003 7:16 AM
To: freebsd-net@freebsd.org
Cc: freebsd-isp@freebsd.org
Subject: IPSEC in tunnel mode ( possible? )


   Hi everyone,

   I know it is kind an off-topic question but maybe another network admi=
n
have already faced the following:

      client--[__ipsec__]--gw--[__ip__]--internet

   I, trying to secure a wireless link, want to have my clients using
ipsec on the segment between the gateway gw and the machine itself even
when the traffic is to the internet and not only to the gateway ( what
works fine in transport mode anyway ). The clients are windows
machines.
   Accordingly to Microsoft 252735 tunnel is possible when a windows is
acting as a gateway, not our scenario where machines are only
clients...
   Any one could point me to some url or send me keywords I should look
for please? If things won=B4t work with ipsec I=B4ll do it with MPD... bu=
t
I still should have ask it here.

   Thanks in advance ( and sorry for the cross posting ),



--
=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D=
-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D
 Paiva, Gilson de        Domingos Martins
 mailto:npd@el.com.br    Brazil
 http://www.el.com.br/   E&L Producoes de Software
 http://www.FreeBSD.org/ FreeBSD: The Power to Serve
=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D-=3D=
-=3D-=3D-=3D-=3D-=3D-=3D-=3D-
_______________________________________________
freebsd-isp@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-isp
To unsubscribe, send any mail to "freebsd-isp-unsubscribe@freebsd.org"




_______________________________________________
freebsd-isp@freebsd.org mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-isp
To unsubscribe, send any mail to "freebsd-isp-unsubscribe@freebsd.org"



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?HCELIPBBEBGPLLIOIABMAEOGCEAA.lachlan>