FastIPSec and OCF

Eygene Ryabinkin rea-fbsd at codelabs.ru
Fri Oct 5 04:46:13 PDT 2007


Fri, Oct 05, 2007 at 12:26:15PM +0100, Bubble Reading wrote:
> Can I use Fast-IPSec as a tool to run a crypto command ?

If you mean by 'Fast-IPSec' the implementation of the IPSec made
by George Neville-Neil (used to be FAST_IPSEC, but in the 7-CURRENT
old KAME stack was thrown away, so now it is named just IPSEC),
then no, it is the kernel-level implementation of the IPSEC protocol.

But maybe you will be interested in the setkey utility and the
ipsec_set_policy manual page.  And the FreeBSD Handbook IPSec section,
    http://www.freebsd.org/doc/en/books/handbook/ipsec.html
is worth to be read too.
-- 
Eygene


More information about the freebsd-security mailing list