Date: Wed, 29 Nov 2000 18:00:45 -0500 (EST) From: Wayne F Davis <wfdavis@seas.upenn.edu> To: freebsd-security@freebsd.org Subject: IPsec interoperability with Windows 2000 Message-ID: <Pine.SOL.4.21.0011291751130.25605-100000@red.seas.upenn.edu>
next in thread | raw e-mail | index | archive | help
Hi, I need to get IPsec setup between some windows boxes and a freebsd server. I have IPsec going between the windows boxes and I configured IPsec on the server, however it's not working properly. Win2k's IP Security Monitor shows a lot of Bad SPI Packets and the windows box cannot talk to the freebsd box. Here's my setup on freebsd: add 192.168.0.1 192.168.0.2 esp 9876 -E 3des-cbc "blahblahblahblahblahblah"; add 192.168.0.2 192.168.0.1 esp 10000 -E 3des-cbc "blahblahblahblahblahblah"; add 192.168.0.1 192.168.0.2 ah 9877 -A hmac-md5 "blahblahblahblah"; add 192.168.0.2 192.168.0.1 ah 10001 -A hmac-md5 "blahblahblahblah"; spdadd 192.168.0.1 192.168.0.2 any -P out ipsec esp/transport//use ah/transport//use; My setup on Win2k: All IP Traffic Request Security Auth Method Preshared Key: blahblahblahblah -- So, I'm wondering if anyone has setup IPsec between FreeBSD and Win2k. I'd appreciate any comments. Thanks. Wayne Davis - wfdavis@seas.upenn.edu To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-security" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.SOL.4.21.0011291751130.25605-100000>