transport mode IPSec with Windows 7, static keys
Victor Sudakov
vas at mpeks.tomsk.su
Tue Sep 22 15:10:09 UTC 2015
Larry Baird wrote:
> >
> > Has anyone tried to set up transport mode IPSec with Windows 7 using
> > static keys?
> >
> > I have trouble finding encryption and authentication algorithms
> > mutually acceptable on FreeBSD and Windows 7. The latter can only do
> > des or 3des for encryption and md5 or sha1 for authentication, and
> > requires both ealgo and aalgo to be configured.
> >
> > If anyone has a success story, could you please show your manually
> > added SAD entries or, better still, the relevant "setkey -c add ..."
> > commands?
> >
> > Thank you very much in advance.
> Try using strongswan and IKEv2. I don't have this running at the moment,
> but I know I used link below to get it to work in the past.
> https://wiki.strongswan.org/projects/strongswan/wiki/Windows7
I use IKE when I have to, but would like to use static keys with
Windows specifically, or at least would like to definitely know if it
is at all possible or not.
--
Victor Sudakov, VAS4-RIPE, VAS47-RIPN
sip:sudakov at sibptus.tomsk.ru
More information about the freebsd-net
mailing list