Skip site navigation (1)Skip section navigation (2)
Date:      Tue, 2 Jan 2001 20:58:17 +0600 (NOVT)
From:      Alexey Dokuchaev <danfe@inet.ssc.nsu.ru>
To:        questions@freebsd.org
Subject:   IPSec setkey - where to put?
Message-ID:  <Pine.LNX.4.10.10101022049120.31379-100000@inet.ssc.nsu.ru>

next in thread | raw e-mail | index | archive | help
Hello!

I've decided to use IPSec mechanism to secure the traffic between my two
FreeBSD boxes.  I've decided to do this manually (thus, not using racoon
daemon).

And I have two ?s:

	* Is it OK to set keys only once upon startup?  If this is OK,
where would be the best place to do this?  In rc.local? or rc.security?
Or maybe there's already special file reserved for this matter, and I am
missing it?

	* Or, even better, to setup a cron job, and assign different keys,
say, every hour?

Any comments/suggestions are welcomed and appreciated.  Thank you.

--
	WBR,
	Alexey

P.S.  Please be so kind to CC: me directly since I'm not the member of
this list.  Tnx.



To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message




Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.LNX.4.10.10101022049120.31379-100000>