From owner-freebsd-questions@freebsd.org  Wed Jan 20 05:27:54 2016
Return-Path: <owner-freebsd-questions@freebsd.org>
Delivered-To: freebsd-questions@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id D42ABA88967
 for <freebsd-questions@mailman.ysv.freebsd.org>;
 Wed, 20 Jan 2016 05:27:54 +0000 (UTC)
 (envelope-from bhat.jayalakshmi@gmail.com)
Received: from mail-yk0-x231.google.com (mail-yk0-x231.google.com
 [IPv6:2607:f8b0:4002:c07::231])
 (using TLSv1.2 with cipher ECDHE-RSA-AES128-GCM-SHA256 (128/128 bits))
 (Client CN "smtp.gmail.com",
 Issuer "Google Internet Authority G2" (verified OK))
 by mx1.freebsd.org (Postfix) with ESMTPS id 96B3A1EB0
 for <freebsd-questions@freebsd.org>; Wed, 20 Jan 2016 05:27:54 +0000 (UTC)
 (envelope-from bhat.jayalakshmi@gmail.com)
Received: by mail-yk0-x231.google.com with SMTP id v14so581270548ykd.3
 for <freebsd-questions@freebsd.org>; Tue, 19 Jan 2016 21:27:54 -0800 (PST)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113;
 h=mime-version:from:date:message-id:subject:to:content-type;
 bh=1aw4aG4ByJgbWgz0/8uaMKXCRAsVGG+SAgkAvtFBwZY=;
 b=GFXBTlFwCsdbH2EOTi98uCxEB1M02kQNDR5whj4mFwaj3i1n9MV4/TQsaBkIh3gWgk
 LX5BhcISyFYz6VpcxCH6lNm+w2cxMAYCIvslAOBQje5JPh72ntLfpwTV7JyKJq8zFkGk
 B+Wux/vbI7N284POglU4lrpkCKHNBuEknoSxF0e4Boq3Qll1NMgOaEdB7A0Gz7draGn8
 OvMYOzmUBkBuLoRU72v30g0Yrcl/srnimVGUVKa8udwGGkVEAWCDOfhxLIildXUnjMMe
 kmzaX8Cf9RAvp0FRHUnOWGKUpIt4U7qVAaewE9Pock+Z9wqwbMdCW61WgJ58y9jkM7BV
 sMPw==
X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed;
 d=1e100.net; s=20130820;
 h=x-gm-message-state:mime-version:from:date:message-id:subject:to
 :content-type;
 bh=1aw4aG4ByJgbWgz0/8uaMKXCRAsVGG+SAgkAvtFBwZY=;
 b=Z5VGkP/GyaM102GOw1cSd1h5VPstSCyrkQjuXbtmj505lkcAhDcU592B6XDU3nZYcu
 IqAiNNlx2LcwC/9t7lrzSbRhlx/Jb5eDyQKT/lcs3Br0I+bxE1yJXDAxdjKxqCUcrzhJ
 +LGHBFWEmAbqIlNxMIvOMeXKPJSZpgLjoEIiz7zBWsHE+9TdGF70uP2RCaAhkZov8TLO
 d95X5yRCrokDXAGefknngGuyPZVMxGX01VRQlSJmJC29bVNP5GjUqlrtatiR8SNbbnSh
 U7Q5O1cKzp6kqBWA+eBgHzBF4KrMz6Vx9HKVtBGzt8uEf+jM+vJVjGwY1MEP5VA8uHP7
 yM8A==
X-Gm-Message-State: ALoCoQnd1VZaSZesL9Ip8lqrL8+jGlhzB9Q1M5rKeJ/Id3QNesmIY+CwgjDDNyuFMW+BbYh04oeQUM5wUHlHSdnPM4h0F8H7yg==
X-Received: by 10.37.31.87 with SMTP id f84mr9524014ybf.151.1453267673802;
 Tue, 19 Jan 2016 21:27:53 -0800 (PST)
MIME-Version: 1.0
Received: by 10.129.76.193 with HTTP; Tue, 19 Jan 2016 21:27:14 -0800 (PST)
From: Jayalakshmi bhat <bhat.jayalakshmi@gmail.com>
Date: Wed, 20 Jan 2016 10:57:14 +0530
Message-ID: <CALq8RvJxgHBuEfWNOBuK=3uf__+ksNkqV4GLZrkOjefr2c_hLw@mail.gmail.com>
Subject: network interface support in FreeBSD IPsec
To: freebsd-questions@freebsd.org
Content-Type: text/plain; charset=UTF-8
X-Content-Filtered-By: Mailman/MimeDel 2.1.20
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.20
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions/>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 20 Jan 2016 05:27:54 -0000

Hi All,

We have systems having multiple interfaces and would like to control IPsec
policy per interface. We are investigating if FreeBSD IPsec supports
specifying interface index in the Kernel IPsec policy. This would be
helpful to control IPsec connections per interface. We are not seeing any
such ifindex support in the latest 10.2 stable release.

Could you please confirm if any ifindex option is available in Kernel IPsec
policy options ?


Regards
Jayalakshmi