ipsec

[Robert Watson]

On Thu, 15 May 2003, fa ch wrote:

> i am working on a project ipv6/ipsec between XP/freebsd 4.7 can u please
> tell why setting up ipsec isn't working using manual keys and if am
> wrong why
>  
> hope u reply before monday wich is the deadline of my project thank u

Note that IPSEC works with IPv6 on FreeBSD, but FAST_IPSEC does not yet
work with IPv6 properly, so make sure you're using the KAME IPSEC option
and not FAST_IPSEC.

You definitely want to use IKE if you can -- there are a lot of parameters
to IPsec protection, and getting the right parameters by hand is very
difficult.  In fact, it might not be possible if XP requires you to use
IKE to configure all the IPSEC parameters. 

Robert N M Watson             FreeBSD Core Team, TrustedBSD Projects
robert at fledge.watson.org      Network Associates Laboratories