From owner-freebsd-questions@FreeBSD.ORG Thu Feb 16 17:26:51 2006 Return-Path: X-Original-To: freebsd-questions@freebsd.org Delivered-To: freebsd-questions@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id 6BECB16A420 for ; Thu, 16 Feb 2006 17:26:51 +0000 (GMT) (envelope-from gabor.kovesdan@t-hosting.hu) Received: from server.t-hosting.hu (server.t-hosting.hu [217.20.133.7]) by mx1.FreeBSD.org (Postfix) with ESMTP id E8CF343D69 for ; Thu, 16 Feb 2006 17:26:46 +0000 (GMT) (envelope-from gabor.kovesdan@t-hosting.hu) Received: from localhost (localhost [127.0.0.1]) by server.t-hosting.hu (Postfix) with ESMTP id E96F599887F for ; Thu, 16 Feb 2006 18:26:45 +0100 (CET) Received: from server.t-hosting.hu ([127.0.0.1]) by localhost (server.t-hosting.hu [127.0.0.1]) (amavisd-new, port 10024) with LMTP id 89250-06-2 for ; Thu, 16 Feb 2006 18:26:42 +0100 (CET) Received: from [192.168.2.186] (catv-5062e7e3.catv.broadband.hu [80.98.231.227]) (using TLSv1 with cipher DHE-RSA-AES256-SHA (256/256 bits)) (No client certificate requested) by server.t-hosting.hu (Postfix) with ESMTP id 74228998871 for ; Thu, 16 Feb 2006 18:26:42 +0100 (CET) Message-ID: <43F4B5D2.6020303@t-hosting.hu> Date: Thu, 16 Feb 2006 18:26:42 +0100 From: =?ISO-8859-1?Q?K=F6vesd=E1n_G=E1bor?= User-Agent: Mozilla Thunderbird 1.0.6 (Windows/20050716) X-Accept-Language: en-us, en MIME-Version: 1.0 To: freebsd-questions Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit X-Virus-Scanned: amavisd-new at t-hosting.hu Subject: Setting up VPN+IPSec+Racoon X-BeenThere: freebsd-questions@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: User questions List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 16 Feb 2006 17:26:51 -0000 Hello, it is the first time I have to set up such configuration. Could you tell me some guidelines? What should I care about? I see there's a chapter in the Handbook about VPN. It mentions the FAST_IPSEC kernel option in >5.X. Should I use this implemetation or the KAME implementation? What are the differencies, and what are the advantages, disadvantages of each? If you know some other good tutorial or howto, please let me know. Thanks in advance, Gabor Kovesdan