IPsec How-to

[Libby Charles-CCL044]

>From: owner-freebsd-questions at freebsd.org
[mailto:owner-freebsd-questions at freebsd.org] On Behalf Of Luke Kearney
>Sent: Thursday, March 31, 2005 9:46 AM
>To: Monah Baki
>Cc: freebsd-questions at freebsd.org
>Subject: Re: IPsec How-to
>
>> Hi all,
>> 
>> I'm reading the FreeBSD handbook, the vpn over ipsec how-to section, 
>> but how do I apply it if I have 1 freebsd machine with 1 NIC, and 
>> multiple XP boxes in a LAN. All communications nfs, ftp etc etc to 
>> that Freebsd machine must be encrypted. Can it be done? is there any 
>> how to for this scenario somewhere?
>> 
>> 
>> Thank you
>
>Hi,
>Yes it is possible though I won't claim to have done it myself but you
would probably be best to start off by looking
>into a program like racoon or something then set up each machine with
the private keys or certificates. I believe XP is
> pretty easy setup when it comes to IPSec.

It is easy to set up, but it only has single key functionality.  It does
not fully support IPSec.  This is a big reason why they do not broadcast
it usablity.  They rely on other VPN solutions.  One that is up and
coming is VPN through SSL.

Charles