From owner-freebsd-net@FreeBSD.ORG  Fri Aug 18 09:58:54 2006
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
X-Original-To: net@FreeBSD.org
Delivered-To: freebsd-net@FreeBSD.ORG
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP id 3E13516A4E1;
	Fri, 18 Aug 2006 09:58:54 +0000 (UTC)
	(envelope-from regnauld@macbook.catpipe.net)
Received: from macbook.catpipe.net (flow.catpipe.net [195.249.214.179])
	by mx1.FreeBSD.org (Postfix) with ESMTP id 44AA143D9A;
	Fri, 18 Aug 2006 09:58:44 +0000 (GMT)
	(envelope-from regnauld@macbook.catpipe.net)
Received: by macbook.catpipe.net (Postfix, from userid 1001)
	id 8B43B15AFBD; Fri, 18 Aug 2006 11:58:41 +0200 (CEST)
Date: Fri, 18 Aug 2006 11:58:41 +0200
From: Phil Regnauld <regnauld@catpipe.net>
To: Remko Lodder <remko@FreeBSD.org>
Message-ID: <20060818095840.GA29866@catpipe.net>
References: <44E58E9E.1030401@FreeBSD.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Content-Disposition: inline
In-Reply-To: <44E58E9E.1030401@FreeBSD.org>
X-Operating-System: Darwin 8.7.1 i386
Organization: catpipe Systems ApS
User-Agent: Mutt/1.5.11
Cc: net@FreeBSD.org
Subject: Re: Routing IPSEC packets?
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Fri, 18 Aug 2006 09:58:54 -0000

Remko Lodder (remko) writes:
> 
> Can someone either confirm my above statement that FreeBSD
> is indeed not capable of doing this?

	FreeBSD does not yet have an "ipsec" or "enc" interface type
	dynamically associated to IPsec tunnels, no.  But you can
	achieve pretty much the same thing by using gif tunnels
	and transport encryption.