Skip site navigation (1)Skip section navigation (2)
Date:      Wed, 27 Jun 2001 14:48:27 -0400
From:      Jim Mock <jim@compete.com>
To:        Gavin Kenny <gavinkenny@yahoo.co.uk>
Cc:        questions@freebsd.org
Subject:   Re: VPN setup
Message-ID:  <20010627144827.A3306@cartman.boston.geekhouse.net>
In-Reply-To: <20010627125905.A2424@cartman.boston.geekhouse.net>
References:  <20010627164434.51128.qmail@web20006.mail.yahoo.com> <20010627125905.A2424@cartman.boston.geekhouse.net>

next in thread | previous in thread | raw e-mail | index | archive | help
On Wed, 27 Jun 2001 at 12:59:05 -0400, Jim Mock wrote:
> On Wed, 27 Jun 2001 at 17:44:34 +0100, Gavin Kenny wrote:
> > Jim,
> > 
> > Have you set up the Security Associations?
> > 
> > you have used spdadd which sets up you security policy (i.e. if you
> > want to send a packet from A to B encrypt it)
> > 
> > But you also need the SA's to tell IPSec what algorythms to use and
> > what keys to use. It is dead easy if you are prepared to set them up
> > manually, lots harder if you want to use IKE (so I'm told).
> 
> Ah ha.  I didn't do that.  I wouldn't even have posted if I saw the
> link to the diary article (that's what I get for not reading my mail
> first, I guess :-).
> 
> Thanks for the tip.

Ok, after reading through the diary article, I scrapped what I had
before and decided to follow it.  The only difference between my setup
and the setup in the diary is the VPN IPs.  For the machine here, I used
192.168.1.254, and for the machine in SF I used 192.168.3.254.  I can't
ping either from either machine.  Is this normal?

- jim

-- 
- jim mock <jim@compete.com>      www.compete.com - jim@FreeBSD.org -
- senior systems administrator - Compete, Inc. - ph: 1.617.867.7035 -

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20010627144827.A3306>