question regarding IPSEC Setup

rascal rascal1981 at gmail.com
Wed Jul 15 03:01:58 UTC 2009


very good then, I'll have to uninstall racoon2/install the ipsectools.  I
must have missed when I installed ipsectools but no worries.  If I could ask
one more favor; what does your cisco config look like that would match one
of these?  I have got mine configed based on someone else's tunnel specs and
while I am sure they are comparable I wanted to make sure I wasn't missing
anything.  I was trying to go off of this:
http://www.derkeiler.com/Mailing-Lists/FreeBSD-Security/2002-09/11533.html
But it's a little outdated and wanted to make sure I was doing it
correctly.  It sounds like I am on the right path for this, just a few more
pieces to go!  Thanks very much again for the help!

On Tue, Jul 14, 2009 at 10:12 PM, David DeSimone <fox at verio.net> wrote:

> rascal <rascal1981 at gmail.com> wrote:
> >
> > I have the racoon2 package; does this make a big difference or do
> > these configs work close to the same?
>
> I did not have any luck using racoon2 because apparently it does not
> interoperate well with older IPSEC implementations.  At least, it did
> not a couple of years ago when I set up my IPSEC.
>
> What you probably want is the security/ipsec-tools port, which contains
> the original racoon IKE daemon.
>
> --
> David DeSimone == Network Admin == fox at verio.net
>  "I don't like spinach, and I'm glad I don't, because if I
>   liked it I'd eat it, and I just hate it." -- Clarence Darrow
>
>
> This email message is intended for the use of the person to whom it has
> been sent, and may contain information that is confidential or legally
> protected. If you are not the intended recipient or have received this
> message in error, you are not authorized to copy, distribute, or otherwise
> use this message or its attachments. Please notify the sender immediately by
> return e-mail and permanently delete this message and any attachments.
> Verio, Inc. makes no warranty that this email is error or virus free.  Thank
> you.
>


More information about the freebsd-net mailing list