transport mode IPSec with Windows 7, static keys

Victor Sudakov vas at mpeks.tomsk.su
Tue Sep 22 15:10:09 UTC 2015


Larry Baird wrote:
> > 
> > Has anyone tried to set up transport mode IPSec with Windows 7 using
> > static keys? 
> > 
> > I have trouble finding encryption and authentication algorithms
> > mutually acceptable on FreeBSD and Windows 7. The latter can only do
> > des or 3des for encryption and md5 or sha1 for authentication, and
> > requires both ealgo and aalgo to be configured.
> > 
> > If anyone has a success story, could you please show your manually
> > added SAD entries or, better still, the relevant "setkey -c add ..."
> > commands?
> > 
> > Thank you very much in advance.
> Try using strongswan and IKEv2. I don't have this running at the moment,
> but I know I used link below to get it to work in the past.
>     https://wiki.strongswan.org/projects/strongswan/wiki/Windows7

I use IKE when I have to, but would like to use static keys with
Windows specifically, or at least would like to definitely know if it
is at all possible or not.

-- 
Victor Sudakov,  VAS4-RIPE, VAS47-RIPN
sip:sudakov at sibptus.tomsk.ru


More information about the freebsd-net mailing list