[FUGSPBR] VPN - IPSEC sem GIF

[William Armstrong]

ja  fiz  uma vpn entre 2 freebsd  5.2.1  seguindo  setkey  manual  
entre   2 ip da virtua  cable.

só  usei ipsec  ESP  nao usei  AH  pois  fiquei com medo de tem algum
nat no meio e  dar pau.


segue a config do script 

ifconfig gif0 destroy
route delete 192.168.17.0 192.168.16.2
ipfw del 101

ifconfig gif0 create tunnel $1 200.250.220.xx
ifconfig gif0 inet 192.168.16.2 192.168.17.2 netmask 0xffffffff
route add 192.168.17.0 192.168.17.2 


ipfw add 101 allow all from any to any via gif0


ipfw sh 101
netstar -rn | grep 192.168.17
ifconfig gif0

setkey -F
setkey -FP

setkey -D && setkey -DP

setkey -c <<EOF
add $1 200.250.220.xx esp 1011 -E rijndael-cbc 
"0446ce1fd257b7d69bf46341e8938810";
add 200.250.220.xx$1 esp 1012 -E rijndael-cbc 
"914c392565727197ad884afdbe563c47";
                               
spdadd $1 200.250.220.xx any -P out ipsec \
esp/tunnel/$1-200.250.220.xx/require ;

spdadd 200.250.220.xx $1 any -P in ipsec \
esp/tunnel/200.250.220.xx-$1/require ;
        


--- 
-=-=-=-=-=-=-=-=-=-
William David Armstrong
Bio Systems Security.
ICQ 10253747 MSN bio__wolf em hotmail.com
_______________________________________________________________
Para enviar um novo email para a lista: fugspbr em fugspbr.org
Sair da Lista: http://lists.fugspbr.org/listinfo.cgi
Historico: http://www4.fugspbr.org/lista/html/FUG-BR/