From owner-freebsd-stable  Mon May 21 10:20:18 2001
Delivered-To: freebsd-stable@freebsd.org
Received: from greyhound.bentonrea.com (mail.bentonrea.com [12.18.240.4])
	by hub.freebsd.org (Postfix) with ESMTP id DAC9137B424
	for <freebsd-stable@FreeBSD.ORG>; Mon, 21 May 2001 10:20:14 -0700 (PDT)
	(envelope-from everett@bentonrea.com)
Received: from everett (everett.bentonrea.com [216.7.40.99])
	by greyhound.bentonrea.com (8.9.3/8.9.3) with SMTP id KAA24191
	for <freebsd-stable@FreeBSD.ORG>; Mon, 21 May 2001 10:20:15 -0700
From: "Brandt Everett" <everett@bentonrea.com>
To: <freebsd-stable@FreeBSD.ORG>
Subject: ESP between two FreeBSD boxes
Date: Mon, 21 May 2001 10:19:32 -0700
Message-ID: <002e01c0e21a$342dd5a0$632807d8@prosser.bentonrea.org>
MIME-Version: 1.0
Content-Type: text/plain;
	charset="us-ascii"
Content-Transfer-Encoding: 7bit
X-Priority: 3 (Normal)
X-MSMail-Priority: Normal
X-Mailer: Microsoft Outlook CWS, Build 9.0.2416 (9.0.2911.0)
In-Reply-To: <20010521123627.A15855@mushhaven.net>
X-MimeOLE: Produced By Microsoft MimeOLE V5.50.4522.1200
Importance: Normal
Sender: owner-freebsd-stable@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-stable.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo?subject=subscribe%20freebsd-stable>
List-Unsubscribe: <mailto:majordomo?subject=unsubscribe%20freebsd-stable>
X-Loop: FreeBSD.ORG

I am trying to setup a simple encrypted communication between two machines,
but when ever I set it up, communication stops between them.  Below are my
setkey commands.  I am at a loss.  Can anyone help me out?

Thanks

Brandt Everett

-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
phone:     1-800-398-1232 x 234
webpage:      www.bentonrea.com
-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-



Machine A
/usr/sbin/setkey -c << EOF
spdadd ${boxcar} ${hercules} any -P out ipsec
esp/transport/${boxcar}-${hercules}/require;
spdadd ${hercules} ${boxcar} any -P in ipsec
esp/transport/${hercules}-${boxcar}/require;
add ${boxcar} ${hercules} esp 12345 -E blowfish-cbc "somethingsecret";
add ${hercules} ${boxcar} esp 12346 -E blowfish-cbc "somethingsecret";
EOF


Machine B
/usr/sbin/setkey -c << EOF
spdadd ${hercules} ${boxcar} any -P out ipsec
esp/transport/${hercules}-${boxcar}/require;
spdadd ${boxcar} ${hercules} any -P in ipsec
esp/transport/${boxcar}-${hercules}/require;
add ${boxcar} ${hercules} esp 12345 -E blowfish-cbc "somethingsecret";
add ${hercules} ${boxcar} esp 12346 -E blowfish-cbc "somethingsecret";
EOF


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-stable" in the body of the message