HOW TO Enable IPSec for FreeBSD.......???
jpriotti at gmail.com
Wed May 18 00:44:58 PDT 2005
Have you tried this:
it worked for me
----- Original Mes
From: "mohan chandra" <mohanchandra_01 at yahoo.co.in>
To: "Danil V. Gerun" <news at 625.ru>; <freebsd-security at freebsd.org>;
<alex at camulus.com>; <mike at sentex.net>
Sent: Wednesday, May 18, 2005 4:31 AM
Subject: Re: HOW TO Enable IPSec for FreeBSD.......???
> Hi Danil,
> Thanks to all for replying..
> I executed (build) the kernel with hte propely
> commands by changing the "GENERIC" with "MYKERNEL" at
> the "ident" option.
> #commands used are
> make buildkernel KERNCONF=MYKERNEL
> make installkernel KERNCONF=MYKERNEL && reboot
> But still ipsec support is not there. If ipsec exists
> the file ipsec.conf should be there under " /etc "
> folder,but it is not there..
> I found ' MYKERNEL ' folder under the following
> It contains so many object files and C-header files,
> In that ipsec.o, ipsec.h and other ipsec related file
> like esp,ah etc., are appearing.
> So with this can I do anything to add ipsec, Please
> reply me soon.
> Also I tried using 'setkey' to find the ipsec support
> with following commands and I got the following
> mohan# setkey -D
> No SAD entries.
> mohan# setkey -DP
> No SPD entries.
> And atlast can I use any ipsec patches for FreeBSD.
> So, please suggest me any sort of solution to get
> ipsec on my FreeBSD (4.11)
> with Regards,
> --- "Danil V. Gerun" <news at 625.ru> wrote:
> > mc> /usr/src/sys/i386/conf/MYKERNEL
> > ...
> > mc> # cd /usr/src
> > mc> # make buildkernel KERNCONF=IPSEC && make
> > mc> installkernel KERNCONF=IPSEC
> > If this is what you've really done, then you should
> > do
> > make buildkernel KERNCONF=MYKERNEL
> > make installkernel KERNCONF=MYKERNEL
> > And you can also change the 'ident' option in the
> > kernel to the
> > ident MYKERNEL
> > --
> > Best regards, Danil V. Gerun
> > danil at hate.spam.625.ru
> > _______________________________________________
> > freebsd-security at freebsd.org mailing list
> > To unsubscribe, send any mail to
> > "freebsd-security-unsubscribe at freebsd.org"
> > mohan chandra wrote:
> > Hi,
> > I have tried to enable IPSec support for my
> > FreeBSD( 4.11-RELEASE) system.
> > First, I copied the generic kernel configuration
> > to a file I called MYKERNEL:
> > #cp /usr/src/sys/i386/conf/GENERIC
> > /usr/src/sys/i386/conf/MYKERNEL
> > Then, I added the following three lines to the
> > section of /usr/src/sys/i386/conf/MYKERNEL:
> > options IPSEC
> > options IPSEC_ESP
> > options IPSEC_DEBUG
> > After that I recompile the kernel with the following
> > command:
> > # cd /usr/src
> > # make buildkernel KERNCONF=IPSEC && make
> > installkernel KERNCONF=IPSEC
> > And also installed IKE support on my system with the
> > following command using racoon:
> > cd /usr/ports/security/racoon
> > make install clean
> > Afterall completion of build, still IPSec support is
> > not appearing in the system. Suggest me,is there any
> > configuration or modifications need to be done?
> > Please, anyone give me some suggestion to enable
> > support on FreeBSD.
> > Any Help will be very much appeciated..
> > Thanx,
> > Regards,
> > Mohan..
> Yahoo! India Matrimony: Find your life partner online
> Go to: http://yahoo.shaadi.com/india-matrimony
> freebsd-security at freebsd.org mailing list
> To unsubscribe, send any mail to
"freebsd-security-unsubscribe at freebsd.org"
More information about the freebsd-security