Skip site navigation (1)Skip section navigation (2) 
Date:      Thu, 05 Dec 2002 10:33:11 -0800
From:      Lars Eggert <larse@ISI.EDU>
To:        Pieter Westland <pieterw@euronet.nl>
Cc:        freebsd-net@freebsd.org
Subject:   Re: IPSEC over wireless link
Message-ID:  <3DEF9BE7.5090708@isi.edu>
In-Reply-To: <20021205130626.A41963@dustpuppy.no-ip.biz>
References:  <20021205130626.A41963@dustpuppy.no-ip.biz>
index | next in thread | previous in thread | raw e-mail 

[-- Attachment #1 --]
Pieter Westland wrote:

> At home I am trying to set the following up properly:
>
>   laptop -- (wireless, ipsec) --- gateway (4.7 STABLE) -- (PPPoE) -- 
> Internet
>
> Laptop has 10.0.0.3, gateway has 10.0.0.1 on the internal sid, rl0. 

...

> setkey -c << EOF
> spdadd 10.0.0.3 0.0.0.0/0 any -P in ipsec esp/transport//require;
> spdadd 10.0.0.0/0 10.0.0.3 any -P out ipsec esp/transport//require;
> EOF

These look fishy. Shouldn't they simply be:

spdadd 10.0.0.3 10.0.0.1 any -P in ipsec esp/transport//require;
spdadd 10.0.0.1 10.0.0.3 any -P out ipsec esp/transport//require;

Lars
-- 
Lars Eggert <larse@isi.edu>           USC Information Sciences Institute

[-- Attachment #2 --]
0	*H
010	+0	*H
	080fErtcvE.0
	*H
010	UZA10UWestern Cape10U	Cape Town10U
Thawte Consulting1(0&UCertification Services Division1$0"UThawte Personal Freemail CA1+0)	*H
	personal-freemail@thawte.com0
000830000000Z
040827235959Z010	UZA10UWestern Cape10U	Cape Town10
U
Thawte10UCertificate Services1(0&UPersonal Freemail RSA 2000.8.3000
	*H
032c	%E>nx'gڈD)c5*mp<ܮto034qmOe
KaU5u'rװ|CBPQ<9TIf-	kiN0L0)U"0 010UPrivateLabel1-2970U00U0
	*H
1KG]qSl]y=&b""I'{9$
*8PUl
LGlX1B	li+@]jy.%݊
Z<D&iHΥbb090%A0
	*H
010	UZA10UWestern Cape10U	Cape Town10
U
Thawte10UCertificate Services1(0&UPersonal Freemail RSA 2000.8.300
020824185339Z
030824185339Z0T10
UEggert1
0U*Lars10ULars Eggert10	*H
	
larse@isi.edu0"0
	*H
0
6Fxΰ7aED&0+Dj)ֽXCUcnleijmz~S0JjWV~	1^({IݛLjӖ
ao:bP}WLVܱ욗cDɖ_Kv.A(W49;Z8-uXE
6b
@_0%#d`Rto5 L0R`w@7
r	Hcc	U3%7N_oV0T0*+e!000L2uMyffBNUbNJJcdZ2s0U0
larse@isi.edu0U00
	*H
]Ȕ,fK<cjRZeLan@Z6,=
fK?yO#8+	Ni*LSfpQg<(aӒ$kTx_AL1>ގ|S090%A0
	*H
010	UZA10UWestern Cape10U	Cape Town10
U
Thawte10UCertificate Services1(0&UPersonal Freemail RSA 2000.8.300
020824185339Z
030824185339Z0T10
UEggert1
0U*Lars10ULars Eggert10	*H
	
larse@isi.edu0"0
	*H
0
6Fxΰ7aED&0+Dj)ֽXCUcnleijmz~S0JjWV~	1^({IݛLjӖ
ao:bP}WLVܱ욗cDɖ_Kv.A(W49;Z8-uXE
6b
@_0%#d`Rto5 L0R`w@7
r	Hcc	U3%7N_oV0T0*+e!000L2uMyffBNUbNJJcdZ2s0U0
larse@isi.edu0U00
	*H
]Ȕ,fK<cjRZeLan@Z6,=
fK?yO#8+	Ni*LSfpQg<(aӒ$kTx_AL1>ގ|S100010	UZA10UWestern Cape10U	Cape Town10
U
Thawte10UCertificate Services1(0&UPersonal Freemail RSA 2000.8.30%A0	+0	*H
	1	*H
0	*H
	1
021205183312Z0#	*H
	1صFƎ}.7^0R	*H
	1E0C0
*H
0*H
0
*H
@0+0
*H
(0	+710010	UZA10UWestern Cape10U	Cape Town10
U
Thawte10UCertificate Services1(0&UPersonal Freemail RSA 2000.8.30%A0*H
	1010	UZA10UWestern Cape10U	Cape Town10
U
Thawte10UCertificate Services1(0&UPersonal Freemail RSA 2000.8.30%A0
	*H
,OيXrBksRK;oG+Pb"CB9bdpa$f˲<0;C+J2OAȌx{tBod(].F8)(Jg%qƥo`%4sҰjSp0nzŚ++ע䰮q)&Y+QaD-&vG͋BI\|
쓰)},eцߵ5W^/
help

Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?3DEF9BE7.5090708>