From owner-freebsd-questions@FreeBSD.ORG  Tue Jun 10 15:10:59 2003
Return-Path: <owner-freebsd-questions@FreeBSD.ORG>
Delivered-To: freebsd-questions@freebsd.org
Received: from mx1.FreeBSD.org (mx1.freebsd.org [216.136.204.125])
	by hub.freebsd.org (Postfix) with ESMTP
	id 45DA237B404; Tue, 10 Jun 2003 15:10:59 -0700 (PDT)
Received: from mailgw2a.lmco.com (mailgw2a.lmco.com [192.91.147.7])
	by mx1.FreeBSD.org (Postfix) with ESMTP
	id 77B3E43FDD; Tue, 10 Jun 2003 15:10:57 -0700 (PDT)
	(envelope-from artem.n.tkachenko@lmco.com)
Received: from emss01g01.ems.lmco.com ([129.197.181.54])
	by mailgw2a.lmco.com (8.11.6p2/8.11.6) with ESMTP id h5AMAsG22632;
	Tue, 10 Jun 2003 18:10:54 -0400 (EDT)
Received: from CONVERSION-DAEMON.lmco.com by lmco.com (PMDF V6.1-1 #40643) id
	<0HGA00N01DM5QY@lmco.com>; Tue, 10 Jun 2003 15:10:53 -0700 (PDT)
Received: from EMSS01I00.us.lmco.com ([129.197.181.70]) by lmco.com (PMDF
	V6.1-1 #40643) with ESMTP id <0HGA00J53DM41A@lmco.com>;
	Tue, 10 Jun 2003 15:10:52 -0700 (PDT)
Received: by EMSS01I00.us.lmco.com with Internet Mail Service (5.5.2653.19)	id
	<M3ATVB1C>; Tue, 10 Jun 2003 15:10:52 -0700
Content-return: allowed
Date: Tue, 10 Jun 2003 15:10:44 -0700
From: "Tkachenko, Artem N" <artem.n.tkachenko@lmco.com>
To: freebsd-questions@freebsd.org,
	"'freebsd-config@freebsd.org'" <freebsd-config@freebsd.org>
Message-id: <573562C6FDA9564A8EEE66D899BC190B02935D8F@EMSS01M10.us.lmco.com>
MIME-version: 1.0
X-Mailer: Internet Mail Service (5.5.2653.19)
Content-type: text/plain; charset=iso-8859-1
Content-transfer-encoding: 7BIT
Subject: Setting up an IPSec tunnel
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.1
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <http://lists.freebsd.org/mailman/listinfo/freebsd-questions>,
	<mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Tue, 10 Jun 2003 22:10:59 -0000

Hello,

I have the following situation:
Node A <-----> LAN1 <-----> Node B <-----> LAN2 <-----> Node C

LAN1 address: 129.197.23.0/24
LAN2 address: 10.0.0.0/24

Node A:
OS: Win2K
IP (to LAN1): 129.197.23.232

Node B:
OS: FreeBSD 4.6
IP address (to LAN1): 129.197.244.6
IP address (to LAN2): 10.0.0.253

Node C:
OS: FreeBSD
IP address (to LAN2) 10.0.0.252

Goal is to set up NetMeeting between Node A and Node C by creating a tunnel
from Node A to Node B.
I have racoon setup on Node B (FreeBSD). Do I have to set up gif()? If yes,
how? What else do I need to do on this node? Please tell me how to setup the
racoon.conf file.

The main problem is setting up Node A (Win2K). I have PGPNet and Nortel VPN
client that I can install on this machine. There is also Win2K build in
IPSec stuff.
I want Node A to also have an IP address on a virtual interface this is part
of LAN2.  I was trying out the built in stuff and I got it to work in the
transport mode but I do not think that's what I need. What is a difference
between the tunnel mode and the transport mode and how do I set up the build
in stuff to work in the tunnel mode?

Any help with any of the questions will be greatly appreciated. Sincerely

Artem
artem.n.tkachenko@lmco.com