From owner-freebsd-net@FreeBSD.ORG  Sun May 10 02:59:46 2009
Return-Path: <owner-freebsd-net@FreeBSD.ORG>
Delivered-To: freebsd-net@freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34])
	by hub.freebsd.org (Postfix) with ESMTP id 9D9FB106566C
	for <freebsd-net@freebsd.org>; Sun, 10 May 2009 02:59:46 +0000 (UTC)
	(envelope-from mike@sentex.net)
Received: from lava.sentex.ca (pyroxene.sentex.ca [199.212.134.18])
	by mx1.freebsd.org (Postfix) with ESMTP id 4E4EA8FC0C
	for <freebsd-net@freebsd.org>; Sun, 10 May 2009 02:59:46 +0000 (UTC)
	(envelope-from mike@sentex.net)
Received: from mdt-xp.sentex.net (simeon.sentex.ca [192.168.43.27])
	by lava.sentex.ca (8.14.3/8.14.3) with ESMTP id n4A2Y3RT009883;
	Sat, 9 May 2009 22:34:03 -0400 (EDT) (envelope-from mike@sentex.net)
Message-Id: <200905100234.n4A2Y3RT009883@lava.sentex.ca>
X-Mailer: QUALCOMM Windows Eudora Version 7.1.0.9
Date: Sat, 09 May 2009 22:35:27 -0400
To: "Sam Wan" <sam@ip6.com.au>, freebsd-net@freebsd.org
From: Mike Tancsa <mike@sentex.net>
In-Reply-To: <26744.220.233.42.226.1241921689.squirrel@secure.ip6.com.au
 >
References: <26744.220.233.42.226.1241921689.squirrel@secure.ip6.com.au>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format=flowed
Cc: 
Subject: Re: IPSEC_ESP and IPSEC_FILTERGIF in 7.2 kernel config file
X-BeenThere: freebsd-net@freebsd.org
X-Mailman-Version: 2.1.5
Precedence: list
List-Id: Networking and TCP/IP with FreeBSD <freebsd-net.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-net>
List-Post: <mailto:freebsd-net@freebsd.org>
List-Help: <mailto:freebsd-net-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-net>,
	<mailto:freebsd-net-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Sun, 10 May 2009 02:59:48 -0000

At 10:14 PM 5/9/2009, Sam Wan wrote:

>How do I enable ipsec in 7.2? do I have to rebuild the kernel with the
>IPSEC options built-in? and which options are supported at the moment?

On 7.x, you need to rebuild your kernel with

     options IPSEC
     device crypto

and optionally

     options IPSEC_FILTERTUNNEL

If you add IPSEC_FILTERTUNNEL, you might as well add
device enc

         ---Mike


         ---Mike