Re: cisco vpn experience?

From: David Duchscher (dave_at_duchscher.com)
Date: 04/16/05

  • Next message: Bruce M Simpson: "Re: TCP MD5 Signature option handling in tcp_syncache.c" 
    Date: Fri, 15 Apr 2005 22:53:18 -0500
To: Julian Elischer <julian@elischer.org>

    On Apr 15, 2005, at 7:18 PM, Julian Elischer wrote:

    >
    >
    > Maksim Yevmenkin wrote:
    >
    >> Maksim Yevmenkin wrote:
    >>
    >>> Julian Elischer wrote:
    >>>
    >>>> Has anyone connected a FreeBSD machine to a "cisco ipsec VPN" as
    >>>> exported by various Cisco routers.
    >>>>
    >>>> they have special solaris, linux and windows clients..
    >>>
    >>>
    >>> tried to play with it. no luck though. could find where to stick
    >>> "group password" (or whatever its called). even looked at linux
    >>> sources at one point. looked like (to me) some shim on top of ipsec.
    >>> i might be wrong (it was long time ago).
    >>
    >>
    >> just tried google'ing it again and
    >>
    >> http://www.unix-ag.uni-kl.de/~massar/vpnc/
    >>
    >> came up... have not tried to actually use it, but it compliled fine
    >
    > yeah I found that.
    >
    > It's a port/package too..
    >
    > I'm hoping it will do the trick for me though it seems a shame that we
    > have to use a
    > linux-based userland program when we have ipsec in the kernel.
    >

    I found this:

       http://ipsec-tools.sourceforge.net/

    Was pointed to by this message:

       http://www.freebsdforums.com/forums/showthread.php?threadid=30092

    and buried inside the src/racoon/samples/roadwarrior/README under
    'Client setup' it says:

       This configuration should be compatible with the Cisco VPN 3000 using
       hybrid authentication, though this has not been tested.

    Hope this helps, 

    --
DaveD
  • Next message: Bruce M Simpson: "Re: TCP MD5 Signature option handling in tcp_syncache.c"