From owner-freebsd-security Sun Jul 8 22:11:20 2001 Delivered-To: freebsd-security@freebsd.org Received: from stuart.microshaft.org (ns1.microshaft.org [208.201.249.2]) by hub.freebsd.org (Postfix) with ESMTP id 4816937B401 for ; Sun, 8 Jul 2001 22:11:17 -0700 (PDT) (envelope-from jono@stuart.microshaft.org) Received: (from jono@localhost) by stuart.microshaft.org (8.9.3/8.9.3) id WAA00610; Sun, 8 Jul 2001 22:11:15 -0700 (PDT) (envelope-from jono) Date: Sun, 8 Jul 2001 22:11:15 -0700 From: "Jon O ." To: Etienne de Bruin Cc: "'security@freebsd.org'" Subject: Re: Checkpoint VPN + FreeBSD IPSEC Client? Message-ID: <20010708221115.A178@networkcommand.com> Reply-To: "jono@networkcommand.com" References: <9D4A4E19244ED4119BE90050DAD5DD47BC5511@mail.quidel.com> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline User-Agent: Mutt/1.2i In-Reply-To: <9D4A4E19244ED4119BE90050DAD5DD47BC5511@mail.quidel.com>; from et@quidel.com on Sun, Jul 08, 2001 at 03:48:31PM -0700 Sender: owner-freebsd-security@FreeBSD.ORG Precedence: bulk List-ID: List-Archive: (Web Archive) List-Help: (List Instructions) List-Subscribe: List-Unsubscribe: X-Loop: FreeBSD.org This might work for you: Integration of Checkpoint VPN-1/FW-1 with FreeBSD's IPSEC: http://www.securityreports.com/article.pl?sid=01/05/11/1711225&mode=thread&threshold= or http://securityportal.com/articles/cpbsd20010525.html I'm assuming by client you mean racoon or something that exchanges keys for you. Let me know if you have any comments or suggestions on the paper or any problems pulling this off. Checkpoint didn't think it would work, but it does. Thanks, Jon On 08-Jul-2001, Etienne de Bruin wrote: > I was wondering if anyone has managed to configure a FreeBSD client to > connect to a network secured by Checkpoint's VPN-1 using IPSEC? > > Thanks > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-security" in the body of the message To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message