Re: Re: IPSEC in tunnel mode ( possible? )

From: Nucleo de Pesquisa e Desenvolvimento (npd_at_el.com.br)
Date: 10/29/03

  • Next message: Diana Eichert: "Re: just tried to upgrade my testbed RADIUS 4.8 server to 4.9RC3"
    Date: Wed, 29 Oct 2003 20:28:02 -0200 (BRST)
    To: freebsd-isp@freebsd.org
    
    

       You got my point Lachlan, you´re right. Having another FBSD box at the
    client side would really solve my challenge.
       If I can´t get windows doing it right by itself I´m already considering
    your idea.

       Thanks!!!

    Original message was:

    I'm not sure if my guess is correct. But instead of using windows over
    ipsec, i would use 2 FreeBSD boxes.

    eg,

    Client Host -- [ipsec on bsd] -- (( wirless )) -- [ipsec on bsd to
    decrypt] -- (( internet ))

    Not sure if that's what you're trying to do, was a little hard to
    understand.

    If that is the case, there is a nice article on freebsd diary that covers
    this pretty well.

    http://www.freebsddiary.org/ipsec.php

    Regards,
            Lachlan

    -----Original Message-----
    From: owner-freebsd-isp@freebsd.org
    [mailto:owner-freebsd-isp@freebsd.org]On Behalf Of Nucleo de Pesquisa e
    Desenvolvimento
    Sent: Thursday, October 30, 2003 7:16 AM
    To: freebsd-net@freebsd.org
    Cc: freebsd-isp@freebsd.org
    Subject: IPSEC in tunnel mode ( possible? )

       Hi everyone,

       I know it is kind an off-topic question but maybe another network admin
    have already faced the following:

          client--[__ipsec__]--gw--[__ip__]--internet

       I, trying to secure a wireless link, want to have my clients using
    ipsec on the segment between the gateway gw and the machine itself even
    when the traffic is to the internet and not only to the gateway ( what
    works fine in transport mode anyway ). The clients are windows
    machines.
       Accordingly to Microsoft 252735 tunnel is possible when a windows is
    acting as a gateway, not our scenario where machines are only
    clients...
       Any one could point me to some url or send me keywords I should look
    for please? If things won´t work with ipsec I´ll do it with MPD... but
    I still should have ask it here.

       Thanks in advance ( and sorry for the cross posting ),

    --
    =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Paiva, Gilson de
    Domingos Martins
     mailto:npd@el.com.br    Brazil
     http://www.el.com.br/   E&L Producoes de Software
     http://www.FreeBSD.org/ FreeBSD: The Power to Serve
    =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-
    _______________________________________________
    freebsd-isp@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-isp
    To unsubscribe, send any mail to "freebsd-isp-unsubscribe@freebsd.org"
    _______________________________________________
    freebsd-net@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-net
    To unsubscribe, send any mail to "freebsd-net-unsubscribe@freebsd.org"
    _______________________________________________
    freebsd-isp@freebsd.org mailing list
    http://lists.freebsd.org/mailman/listinfo/freebsd-isp
    To unsubscribe, send any mail to "freebsd-isp-unsubscribe@freebsd.org"
    

  • Next message: Diana Eichert: "Re: just tried to upgrade my testbed RADIUS 4.8 server to 4.9RC3"

    Relevant Pages

    • Re: Security update pulled back
      ... Recommended Update for Windows XP ... This update to internet Protocol Security Clients IPSec and L2TP/IPSec ... update if they use IPSec and/or L2TP Virtual Private Network ...
      (microsoft.public.security)
    • FreeBSD <-> Windows XP IPSec Phase 1 Timeout
      ... FreeBSD 6.0 box as a gateway with Windows XP road warrior clients VPNing in. ... In order to setup secure access I want to use IPSec for traffic encryption ...
      (freebsd-net)
    • Re: Verhindern, dass sich fremde Rechner im Netzwerk anmelden.
      ... weil IPSec zwischen DC's und Clients ... Dafür ist DHCP der falsche Ansatz. ... Yusuf Dikmenoglu - MVP Windows Server ...
      (microsoft.public.de.german.windows.server.active_directory)
    • Userrights for VPN IPSec connection ?
      ... clients to connect to company headquarter. ... IP address and via script an local IPSec IP Security ... in in Windows with Administrator rights. ... Main User I can not implement the Security Policy. ...
      (microsoft.public.windowsxp.security_admin)
    • Re: voice talk between 2 FBSD boxs
      ... I have used teamspeak running server on FreeBSD 5.0 and the clients on ... windows. ... I think I run my version in linux compat. ... To unsubscribe, ...
      (freebsd-questions)

  • Quantcast