From owner-freebsd-net@FreeBSD.ORG  Fri May 16 15:19:00 2003
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id E9C0237B401
	for <freebsd-net@freebsd.org>; Fri, 16 May 2003 15:19:00 -0700 (PDT)
Received: from fledge.watson.org (fledge.watson.org [204.156.12.50])
	by mx1.FreeBSD.org (Postfix) with ESMTP id CAA8A43F85
	for <freebsd-net@freebsd.org>; Fri, 16 May 2003 15:18:59 -0700 (PDT)
	(envelope-from robert@fledge.watson.org)
Received: from fledge.watson.org (localhost [127.0.0.1])
	by fledge.watson.org (8.12.9/8.12.9) with ESMTP id h4GMIeOn035930;
	Fri, 16 May 2003 18:18:40 -0400 (EDT)
	(envelope-from robert@fledge.watson.org)
Received: from localhost (robert@localhost)h4GMIeKI035927;
	Fri, 16 May 2003 18:18:40 -0400 (EDT)
	(envelope-from robert@fledge.watson.org)
Date: Fri, 16 May 2003 18:18:39 -0400 (EDT)
From: Robert Watson <rwatson@freebsd.org>
X-Sender: robert@fledge.watson.org
To: =?iso-8859-1?q?fa=20ch?= <fadizio@yahoo.fr>
In-Reply-To: <20030515214241.3132.qmail@web21506.mail.yahoo.com>
Message-ID: <Pine.NEB.3.96L.1030516181700.34919B-100000@fledge.watson.org>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
cc: freebsd-net@freebsd.org
Subject: Re: ipsec
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 16 May 2003 22:19:01 -0000


On Thu, 15 May 2003, fa ch wrote:

> i am working on a project ipv6/ipsec between XP/freebsd 4.7 can u please
> tell why setting up ipsec isn't working using manual keys and if am
> wrong why
>  
> hope u reply before monday wich is the deadline of my project thank u

Note that IPSEC works with IPv6 on FreeBSD, but FAST_IPSEC does not yet
work with IPv6 properly, so make sure you're using the KAME IPSEC option
and not FAST_IPSEC.

You definitely want to use IKE if you can -- there are a lot of parameters
to IPsec protection, and getting the right parameters by hand is very
difficult.  In fact, it might not be possible if XP requires you to use
IKE to configure all the IPSEC parameters. 

Robert N M Watson             FreeBSD Core Team, TrustedBSD Projects
robert@fledge.watson.org      Network Associates Laboratories