IPSEC documentation

[Julian Elischer]

Brian Candler wrote:

>On Wed, Dec 28, 2005 at 04:26:43PM +0100, Eric Masson wrote:
>  
>
>>gif/gre tunnels and ipsec transport mode are quite convenient when
>>associated with dynamic routing protocols.
>>    
>>
>
>OK, I'll buy gif + IPSEC transport mode as an option. [Although in that
>case, perhaps what you want is an external IPSEC tunnel mode implementation
>which attaches to a 'tun' device. That's yet another category which I hadn't
>even considered]
>  
>

I use ppp (mpd) over UDP over ipsec transport mode. That gives you a 
"ng0" interface
for the tunnel. (netgraph pseudo interface)

>I still think that gif + IPSEC tunnel mode (as currently documented) is not
>a good approach, especially if it's the *only* mode of operation to be
>documented and hence implicitly recommended as the 'right' way to do it.
>_______________________________________________
>freebsd-net at freebsd.org mailing list
>http://lists.freebsd.org/mailman/listinfo/freebsd-net
>To unsubscribe, send any mail to "freebsd-net-unsubscribe at freebsd.org"
>  
>