Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 30 Nov 2000 12:39:57 -0800
From:      Boris <koester@x-itec.de>
To:        Wayne F Davis <wfdavis@seas.upenn.edu>
Cc:        freebsd-security@FreeBSD.ORG
Subject:   Re: IPsec interoperability with Windows 2000
Message-ID:  <873931232.20001130123957@x-itec.de>
In-Reply-To: <Pine.SOL.4.21.0011291751130.25605-100000@red.seas.upenn.edu>
References:  <Pine.SOL.4.21.0011291751130.25605-100000@red.seas.upenn.edu>

next in thread | previous in thread | raw e-mail | index | archive | help
Hello Wayne,

Wednesday, November 29, 2000, 3:00:45 PM, you wrote:

WFD> Hi,

WFD> I need to get IPsec setup between some windows boxes and a freebsd
WFD> server.  I have IPsec going between the windows boxes and I configured
WFD> IPsec on the server, however it's not working properly.

WFD> Win2k's IP Security Monitor shows a lot of Bad SPI Packets and the
WFD> windows box cannot talk to the freebsd box.

WFD> Here's my setup on freebsd:

WFD> add 192.168.0.1 192.168.0.2 esp  9876 -E 3des-cbc 
WFD> "blahblahblahblahblahblah";
WFD> add 192.168.0.2 192.168.0.1 esp 10000 -E 3des-cbc 
WFD> "blahblahblahblahblahblah";
WFD> add 192.168.0.1 192.168.0.2 ah   9877 -A hmac-md5 "blahblahblahblah";
WFD> add 192.168.0.2 192.168.0.1 ah  10001 -A hmac-md5 "blahblahblahblah";
WFD> spdadd 192.168.0.1 192.168.0.2 any -P out ipsec esp/transport//use 
WFD> ah/transport//use;

WFD> My setup on Win2k:
WFD> All IP Traffic
WFD> Request Security
WFD> Auth Method Preshared Key: blahblahblahblah

WFD> --

WFD> So, I'm wondering if anyone has setup IPsec between FreeBSD and
WFD> Win2k.  I'd appreciate any comments.

Take a look at the IPSEC-HOWTO
http://asherah.dyndns.org/~josh/ipsec-howto.txt




-- 
Best regards,
 Boris                            mailto:koester@x-itec.de




To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?873931232.20001130123957>