Date: Tue, 22 Sep 2015 21:10:03 +0600 From: Victor Sudakov <vas@mpeks.tomsk.su> To: Larry Baird <lab@gta.com>, freebsd-net@freebsd.org Subject: Re: transport mode IPSec with Windows 7, static keys Message-ID: <20150922151003.GA98507@admin.sibptus.tomsk.ru> In-Reply-To: <20150922144246.61965.qmail@mailgate.gta.com> References: <115822.44131.97331@localhost> <20150922144246.61965.qmail@mailgate.gta.com>
next in thread | previous in thread | raw e-mail | index | archive | help
Larry Baird wrote: > > > > Has anyone tried to set up transport mode IPSec with Windows 7 using > > static keys? > > > > I have trouble finding encryption and authentication algorithms > > mutually acceptable on FreeBSD and Windows 7. The latter can only do > > des or 3des for encryption and md5 or sha1 for authentication, and > > requires both ealgo and aalgo to be configured. > > > > If anyone has a success story, could you please show your manually > > added SAD entries or, better still, the relevant "setkey -c add ..." > > commands? > > > > Thank you very much in advance. > Try using strongswan and IKEv2. I don't have this running at the moment, > but I know I used link below to get it to work in the past. > https://wiki.strongswan.org/projects/strongswan/wiki/Windows7 I use IKE when I have to, but would like to use static keys with Windows specifically, or at least would like to definitely know if it is at all possible or not. -- Victor Sudakov, VAS4-RIPE, VAS47-RIPN sip:sudakov@sibptus.tomsk.ru
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20150922151003.GA98507>