From owner-freebsd-net  Mon Apr  8 10:52:44 2002
Delivered-To: freebsd-net@freebsd.org
Received: from artemis.drwilco.net (diana.drwilco.net [66.48.127.79])
	by hub.freebsd.org (Postfix) with ESMTP id 075B737B405
	for <freebsd-net@freebsd.org>; Mon,  8 Apr 2002 10:52:38 -0700 (PDT)
Received: from ceres.drwilco.net (docwilco.xs4all.nl [213.84.68.230])
	by artemis.drwilco.net (8.11.6/8.11.6) with ESMTP id g38Hpwx13034
	(using TLSv1/SSLv3 with cipher DES-CBC3-SHA (168 bits) verified NO)
	for <freebsd-net@freebsd.org>; Mon, 8 Apr 2002 13:52:00 -0400 (EDT)
	(envelope-from drwilco@drwilco.net)
Message-Id: <5.1.0.14.0.20020408200151.01cac1f0@mail.drwilco.net>
X-Sender: lists@mail.drwilco.net
X-Mailer: QUALCOMM Windows Eudora Version 5.1
Date: Mon, 08 Apr 2002 20:04:30 +0200
To: freebsd-net@freebsd.org
From: "Rogier R. Mulhuijzen" <drwilco@drwilco.net>
Subject: IPsec tunnel mode
In-Reply-To: <3CAC84C0.3000702@isi.edu>
References: <MPENKFCCIIDAJKJJOLBHMEAJCNAA.tariq@inty.net>
Mime-Version: 1.0
Content-Type: text/plain; charset="us-ascii"; format=flowed
Sender: owner-freebsd-net@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-net.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-net>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-net>
X-Loop: FreeBSD.org

I've been following the KAME vs. OpenBSD IPsec thread somewhat, and I 
gather that IPsec tunnel mode is not the same as using the gif interface 
(which is IPIP).

My question is, can one get IPsec tunnel mode to work in BSD, and how is it 
done? I do not need a lengthy story, a few terse pointers would be quite 
enough.

Thanx,

	Doc


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-net" in the body of the message