From owner-freebsd-questions  Mon Sep  3 10:31:35 2001
Delivered-To: freebsd-questions@freebsd.org
Received: from thor.oit.pdx.edu (thor.oit.pdx.edu [131.252.120.40])
	by hub.freebsd.org (Postfix) with ESMTP id E3A2337B403
	for <freebsd-questions@FreeBSD.ORG>; Mon,  3 Sep 2001 10:31:32 -0700 (PDT)
Received: from gere.odin.pdx.edu (gere.odin.pdx.edu [131.252.120.42])
	by thor.oit.pdx.edu (8.11.6/8.11.6) with ESMTP id f83HVS201708;
	Mon, 3 Sep 2001 10:31:29 -0700 (PDT)
Received: from localhost (singh@localhost)
	by gere.odin.pdx.edu (8.11.6/8.11.6) with ESMTP id f83HVSR11101;
	Mon, 3 Sep 2001 10:31:28 -0700 (PDT)
X-Authentication-Warning: gere.odin.pdx.edu: singh owned process doing -bs
Date: Mon, 3 Sep 2001 10:31:28 -0700 (PDT)
From: Harkirat Singh <singh@pdx.edu>
X-X-Sender:  <singh@gere.odin.pdx.edu>
To: RJ45 <rj45@slacknet.com>
Cc: <freebsd-questions@FreeBSD.ORG>
Subject: Re: IPSec on FreeBSD ??
In-Reply-To: <Pine.LNX.4.21.0109030707360.19758-100000@slacknet.slacknet.com>
Message-ID: <Pine.GSO.4.33.0109031029210.10925-100000@gere.odin.pdx.edu>
MIME-Version: 1.0
Content-Type: TEXT/PLAIN; charset=US-ASCII
Sender: owner-freebsd-questions@FreeBSD.ORG
Precedence: bulk
List-ID: <freebsd-questions.FreeBSD.ORG>
List-Archive: <http://docs.freebsd.org/mail/> (Web Archive)
List-Help: <mailto:majordomo@FreeBSD.ORG?subject=help> (List Instructions)
List-Subscribe: <mailto:majordomo@FreeBSD.ORG?subject=subscribe%20freebsd-questions>
List-Unsubscribe: <mailto:majordomo@FreeBSD.ORG?subject=unsubscribe%20freebsd-questions>
X-Loop: FreeBSD.ORG

Please look at http://www.cs.pdx.edu/research/SMN/index.html, may be some
help to you.

-harkirat

On Mon, 3 Sep 2001, RJ45 wrote:

>
> Hi!
> I am studying IPSec and trying many implementations of it.
> I am very much interested in how IPSec works in FreeBSD and NetBSD.
> But comparing it with the OpenBSD implementation I still have not found a
> way with FreeBSD to set up and ESP trasnport mode (or tunnel) enabling
> also the authentication features in ESP, seems like only the
> confidentiality features of ESP can be enabled on FreeBSD while on OpenBSD
> also the authentication part of ESP can be enabled.
> Am I wrong about it ??
> IF not how to enable authentication of ESP in FreeBSD ??
> Suppose I Do not want to use AH but  IWant to use only ESP for
> confidentiality (Encrypt the payload) but also for the payload
> authentication which is possible according to IPSec RFCs, how
> can I enable ESP authentication on FreeBSD ??
> then I Wanted to ask if racoon is a ISAKMP IKE compliant protocol or if it
> is something complitely different.
> thank you a lot!
>
> Rick
>
>
>
> To Unsubscribe: send mail to majordomo@FreeBSD.org
> with "unsubscribe freebsd-questions" in the body of the message
>


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-questions" in the body of the message