From owner-freebsd-security Mon Dec 9 14:55:59 2002 Delivered-To: freebsd-security@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 72BD037B401 for ; Mon, 9 Dec 2002 14:55:57 -0800 (PST) Received: from cactus.fi.uba.ar (cactus.fi.uba.ar [157.92.49.108]) by mx1.FreeBSD.org (Postfix) with ESMTP id 2C64143EBE for ; Mon, 9 Dec 2002 14:55:56 -0800 (PST) (envelope-from fgleiser@cactus.fi.uba.ar) Received: from cactus.fi.uba.ar (cactus.fi.uba.ar [157.92.49.108]) by cactus.fi.uba.ar (8.12.3/8.12.3) with ESMTP id gB9Mtd2b012364 for ; Mon, 9 Dec 2002 19:55:39 -0300 (ART) (envelope-from fgleiser@cactus.fi.uba.ar) Date: Mon, 9 Dec 2002 19:55:34 -0300 (ART) From: Fernando Gleiser To: security@freebsd.org Subject: (slightly OT) IPSec with dynamic IP Message-ID: <20021209195332.X5648-100000@cactus.fi.uba.ar> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII X-Spam-Status: No, hits=-100.0 required=5.0 tests=USER_IN_WHITELIST version=2.31 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org I'm sorry if this is OT for -security. I sent it to -questions but got no answer. I need to set up a VPN between a corporate LAN and roaming users. The firewall is a FreeBSD 4.7 box with ipf/ipnat and will act as a security gateway for the tunnel. On the other side there are several Win2K/XP boxes connected to the Internet via DSL/cable modem/dialup/carrier pigeon/whatever and they have a different IP every time they connect. The problem is: every single doc/tutorial/man page/ I've read says how to set up the SA with static IPs, but now one side is dynamic. So the questions are: 1. Is this posible? 2. If it's posible, can I do it with IKE/ISAKMP? 3. Does anybody have a pointer to a doc which says how to do it? I'll rtfm, just tell me where the fm is :) Thanks Fer Fer "When I say "dogs", I'm talking about dogs, which are large, bounding, salivating animals, usually with bad breath. I am not talking about those little squeaky things you can hold on your lap and carry around. Zoologically speaking, these are not dogs at all; they are members of the pillow family." Dave Barry. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message