From owner-freebsd-security  Sun Sep  3 22:16: 5 2000
Delivered-To: freebsd-security@freebsd.org
Received: from mailhost01.reflexnet.net (mailhost01.reflexnet.net [64.6.192.82])
	by hub.freebsd.org (Postfix) with ESMTP id 2BB8A37B424
	for <freebsd-security@freebsd.org>; Sun,  3 Sep 2000 22:16:04 -0700 (PDT)
Received: from 149.211.6.64.reflexcom.com ([64.6.211.149]) by mailhost01.reflexnet.net  with Microsoft SMTPSVC(5.5.1877.197.19);
	 Sun, 3 Sep 2000 22:14:58 -0700
Received: (from cjc@localhost)
	by 149.211.6.64.reflexcom.com (8.9.3/8.9.3) id WAA63472;
	Sun, 3 Sep 2000 22:15:56 -0700 (PDT)
	(envelope-from cjc)
Date: Sun, 3 Sep 2000 22:15:56 -0700
From: "Crist J . Clark" <cjclark@reflexnet.net>
To: Ali Alaoui El Hassani <961BE653994@stud.alakhawayn.ma>
Cc: freebsd-security@FreeBSD.ORG
Subject: Re: SOS Help ipsec  (Esp Ah)
Message-ID: <20000903221556.R62475@149.211.6.64.reflexcom.com>
Reply-To: cjclark@alum.mit.edu
References: <Pine.SOL.3.96.1000904024558.7397C-100000@stud.alakhawayn.ma>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
X-Mailer: Mutt 1.0i
In-Reply-To: <Pine.SOL.3.96.1000904024558.7397C-100000@stud.alakhawayn.ma>; from 961BE653994@stud.alakhawayn.ma on Mon, Sep 04, 2000 at 02:46:32AM +0000
Sender: owner-freebsd-security@FreeBSD.ORG
Precedence: bulk
X-Loop: FreeBSD.org

On Mon, Sep 04, 2000 at 02:46:32AM +0000, Ali Alaoui El Hassani wrote:
> 
> Dear All,
> 
> I am running into trouble. I am using tun0 as tunnel of a secure
> communication via ESP. I want also to use Ah as another reliable kind of
> communication so I thaught about using it via tun1. when I wanted to
> create tun1 i.e (I went to GENERIC and modified the number of  tunnels
> from 1 to 2) and I wanted to recompile the kernel , I had a recompilation
> error due to some patch that I applied to my kernel previously. 
> well the thing is that I can not use point to point links ie sl0,pp0.
> Due to time limitations I can not reinstall another kernel.
> 
> My question is:
> Do you have any idea on how I can overpass this situation ?

Well, you should not need tun(4) devices at all to do IPsec.
-- 
Crist J. Clark                           cjclark@alum.mit.edu


To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message