From owner-freebsd-net Thu Nov 15 19:52:43 2001 Delivered-To: freebsd-net@freebsd.org Received: from nic.vetx.com (nic.vetx.com [209.123.51.6]) by hub.freebsd.org (Postfix) with ESMTP id 5A35637B418 for ; Thu, 15 Nov 2001 19:52:39 -0800 (PST) content-class: urn:content-classes:message MIME-Version: 1.0 Content-Type: text/plain; charset="iso-8859-1" Content-Transfer-Encoding: quoted-printable Subject: RE: IPSEC / RAPTOR Firewall Interaction X-MIMEOLE: Produced By Microsoft Exchange V6.0.4712.0 Date: Thu, 15 Nov 2001 22:50:41 -0500 Message-ID: X-MS-Has-Attach: X-MS-TNEF-Correlator: Thread-Topic: IPSEC / RAPTOR Firewall Interaction Thread-Index: AcFuQhjwS8Wy5kK0RHmHmCDS9yETwwAEABXg From: "Smith, Rick" To: "Shoichi Sakane" Cc: Sender: owner-freebsd-net@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org What's the difference between tunnel and transport mode configs in racoon ? I'm troubled by the fact that racoon seems to be the ONLY tool for this, and yet there's an extreme lack of documentation that exists for racoon configuration. Anyone have a transport mode config from racoon they could share ? Rick -----Original Message----- From: Shoichi Sakane [mailto:sakane@kame.net] Sent: Thursday, November 15, 2001 9:00 PM To: Smith, Rick Cc: freebsd-net@freebsd.org Subject: Re: IPSEC / RAPTOR Firewall Interaction > I'm attempting to figure out how to setup an IPv4 IPSEC tunnel between > two of our other offices (running Symantec Raptor 6.50 for Windows NT) > and my FreeBSD firewall here in my office (4.2-RELEASE) >=20 > Here's a little network diagram of the situation: >=20 > x.x.51.24 (my inside) <--> x.x.5.254 (my external address) <--- > Internet ---> x.x.42.26 (Their External) <--> 172.16.11.0 (Their > Internal) >=20 > On their firewall (Raptor) they are connecting to me using SHA1 / 3DES > with no data compression, also using pre-shared keys. >=20 > I'd like to do this using gif0 tunnels, but I just can't figure out how > to set it all up correctly. =20 don't forget that the generic tunnel(gif) is different from the ipsec tunnel. when you use gif, you have to configure the raptor firewall to use ipsec TRANSPORT mode. Or you should use racoon with the ipsec tunnel mode, without gif. To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-net" in the body of the message