From owner-freebsd-mobile  Wed Feb 19 20:39:28 2003
Delivered-To: freebsd-mobile@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id 0DCED37B401; Wed, 19 Feb 2003 20:39:27 -0800 (PST)
Received: from kestrel.alerce.com (kestrel.alerce.com [209.182.219.40])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id 0206E43F85; Wed, 19 Feb 2003 20:39:26 -0800 (PST)
	(envelope-from hartzell@rosebud.alerce.com)
Received: from rosebud.alerce.com (w092.z064001164.sjc-ca.dsl.cnc.net [64.1.164.92])
	by kestrel.alerce.com (8.12.4/8.12.4) with ESMTP id h1K4dBk6032465
	(version=TLSv1/SSLv3 cipher=EDH-RSA-DES-CBC3-SHA bits=168 verify=OK);
	Wed, 19 Feb 2003 20:39:15 -0800 (PST)
	(envelope-from hartzell@rosebud.alerce.com)
X-Authentication-Warning: kestrel.alerce.com: Host w092.z064001164.sjc-ca.dsl.cnc.net [64.1.164.92] claimed to be rosebud.alerce.com
Received: from rosebud.alerce.com (rosebud.alerce.com [127.0.0.1])
	by rosebud.alerce.com (8.12.7/8.12.7) with ESMTP id h1K4dCfb000859
	(version=TLSv1/SSLv3 cipher=EDH-RSA-DES-CBC3-SHA bits=168 verify=NO);
	Wed, 19 Feb 2003 20:39:18 -0800 (PST)
	(envelope-from hartzell@rosebud.alerce.com)
Received: (from hartzell@localhost)
	by rosebud.alerce.com (8.12.7/8.12.6/Submit) id h1K4dBh4000856;
	Wed, 19 Feb 2003 20:39:11 -0800 (PST)
From: George Hartzell <hartzell@kestrel.alerce.com>
MIME-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Transfer-Encoding: 7bit
Message-ID: <15956.23535.146549.735318@rosebud.alerce.com>
Date: Wed, 19 Feb 2003 20:39:11 -0800
To: freebsd-questions@freebsd.org, freebsd-mobile@freebsd.org
Subject: FreeBSD 4.7-REL-p3 and an IPsec connection to Linksys BEFVP41
X-Mailer: VM 7.07 under 21.1 (patch 14) "Cuyahoga Valley" XEmacs Lucid
Reply-To: hartzell@kestrel.alerce.com (George Hartzell)
Sender: owner-freebsd-mobile@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-mobile.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-mobile>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-mobile>
X-Loop: FreeBSD.org


I'd like to set up an IPsec connection between my laptop running
FreeBSD 4.7-REL-p3 and a Linksys BEFVP41 router w/ built in IPsec
capability.

I've found a number of sites w/ information on setting up ipsec
between a pair of FreeBSD machines, including:

  http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/ipsec.html
  http://www.freebsddiary.org/ipsec-tunnel.php
  http://www.daemonnews.org/200101/ipsec-howto.html
  http://www.bsdtoday.com/2002/April/Features671.html

But none that talk about getting FreeBSD's IPsec talking to anything
non-FreeBSD.

All of the methods are based on setting up a gif tunnel and passing
the packets over that.  I've tried a number of variations on the
recommended recipes, and at best I can watch the isakmp packet going
from the laptop towards the router and get see an icmp packet back
from the router that suggests the the gif tunnel isn't what it wants
to see (sadly, I didn't save the exact message, but can recreate it if
it's important enough).

So, the quick question is, has anyone set up a FreeBSD laptop as a
"road warrior" to an IPsec router?  I'd appreciate any pointers.

If not, I'll post more information about what I've tried and see if
y'all can help me crawl towards a solution.

THanks!

g.


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-mobile" in the body of the message