IPSec/VPN - Issues

[Micheal Patterson]

----- Original Message ----- 
From: "Tommy Forrest - KE4PYM" <tforrest at shellworld.net>
To: <freebsd-questions at freebsd.org>
Sent: Friday, October 31, 2003 2:18 PM
Subject: IPSec/VPN - Issues


> I am trying to setup an IPSec connection using
> http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/ipsec.html.
>
> When I get to the bit about gifconfig gif0 a.b.c.d w.x.y.z (though I'm
> using my real values) I get the following error:
>
> weedwhacker# gifconfig gif0 a.b.c.d w.x.y.z
> gifconfig: interface gif0 does not exist
>
> FreeBSD 4.8-Release.
>
> Relavant Items in my kernel config:
> pseudo-device   gif             # IPv6 and IPv4 tunneling
>
> #Turn on VPN
> options         IPSEC
> options         IPSEC_ESP
>
> Still no dice.
>
> Also, does Racoon support Aggressive mode?  As well as PFS?
>
> Finally, the firewall administrator does not want to give me the IP
> address of his internal interface (I'm mapping to a 10.*.*.* network).
> Is this going to be a problem?
>
>
> Tommy Forrest - KE4PYM -  tforrest at shellworld.net
> My two cents:
> A hangover is the wrath of grapes
>
> PGP Public Key Fingerprint: A6E9 D0CB 2ABC 520A  883D 8008 F660 364A
>

Often, you will need to create the gifx interface manually. Just run an
ifconfig gif0 create before you do your gifconfig entry.



--

Micheal Patterson
TSG Network Administration
405-917-0600

Confidentiality Notice:  This e-mail message, including any attachments, is
for the sole use of the intended recipient(s) and may contain confidential
and privileged information. Any unauthorized review, use, disclosure or
distribution is prohibited. If you are not the intended recipient, please
contact the sender by reply e-mail and destroy all copies of the original
message.