From owner-freebsd-net@FreeBSD.ORG Sat Apr 16 00:18:43 2005 Return-Path: Delivered-To: freebsd-net@freebsd.org Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125]) by hub.freebsd.org (Postfix) with ESMTP id C437516A4CE for ; Sat, 16 Apr 2005 00:18:43 +0000 (GMT) Received: from mail.vicor-nb.com (bigwoop.vicor-nb.com [208.206.78.2]) by mx1.FreeBSD.org (Postfix) with ESMTP id 9F13E43D3F for ; Sat, 16 Apr 2005 00:18:43 +0000 (GMT) (envelope-from julian@elischer.org) Received: from [208.206.78.97] (julian.vicor-nb.com [208.206.78.97]) by mail.vicor-nb.com (Postfix) with ESMTP id 7E4AE7A41E; Fri, 15 Apr 2005 17:18:43 -0700 (PDT) Message-ID: <426059E3.5000902@elischer.org> Date: Fri, 15 Apr 2005 17:18:43 -0700 From: Julian Elischer User-Agent: Mozilla/5.0 (X11; U; FreeBSD i386; en-US; rv:1.7.5) Gecko/20050218 X-Accept-Language: en, hu MIME-Version: 1.0 To: Maksim Yevmenkin References: <42604BD4.9040906@elischer.org> <42604D00.4010401@savvis.net> <42605891.5000104@savvis.net> In-Reply-To: <42605891.5000104@savvis.net> Content-Type: text/plain; charset=us-ascii; format=flowed Content-Transfer-Encoding: 7bit cc: net@freebsd.org Subject: Re: cisco vpn experience? X-BeenThere: freebsd-net@freebsd.org X-Mailman-Version: 2.1.1 Precedence: list List-Id: Networking and TCP/IP with FreeBSD List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Sat, 16 Apr 2005 00:18:43 -0000 Maksim Yevmenkin wrote: > Maksim Yevmenkin wrote: > >> Julian Elischer wrote: >> >>> Has anyone connected a FreeBSD machine to a "cisco ipsec VPN" as >>> exported by various Cisco routers. >>> >>> they have special solaris, linux and windows clients.. >> >> >> tried to play with it. no luck though. could find where to stick >> "group password" (or whatever its called). even looked at linux >> sources at one point. looked like (to me) some shim on top of ipsec. >> i might be wrong (it was long time ago). > > > just tried google'ing it again and > > http://www.unix-ag.uni-kl.de/~massar/vpnc/ > > came up... have not tried to actually use it, but it compliled fine yeah I found that. It's a port/package too.. I'm hoping it will do the trick for me though it seems a shame that we have to use a linux-based userland program when we have ipsec in the kernel. > > max