diff options
| author | Othmar Gsenger <otti@anytun.org> | 2007-07-30 19:37:53 +0000 |
|---|---|---|
| committer | Othmar Gsenger <otti@anytun.org> | 2007-07-30 19:37:53 +0000 |
| commit | 6585e5ad764ee2414d9b01f30784b6549bc8f58e (patch) | |
| tree | 4ea258d5327838363dc3ac66d09ecc94686f3e26 /keyexchange/isakmpd-20041012/sysdep/freeswan/README | |
| parent | ripe requests, final (diff) | |
added keyexchange
Diffstat (limited to 'keyexchange/isakmpd-20041012/sysdep/freeswan/README')
| -rw-r--r-- | keyexchange/isakmpd-20041012/sysdep/freeswan/README | 16 |
1 files changed, 16 insertions, 0 deletions
diff --git a/keyexchange/isakmpd-20041012/sysdep/freeswan/README b/keyexchange/isakmpd-20041012/sysdep/freeswan/README new file mode 100644 index 0000000..3990ab3 --- /dev/null +++ b/keyexchange/isakmpd-20041012/sysdep/freeswan/README @@ -0,0 +1,16 @@ +$OpenBSD: README,v 1.1 2003/05/14 20:49:37 ho Exp $ + +Currently, you have to manually configure any IPsec interfaces and do the +association betweent these and the physical ones. This is done like +this in FreeS/WAN: + +ipsec tncfg --attach --virtual ipsec0 --physical eth0 +ifconfig ipsec0 A.B.C.D netmask E.F.G.H + +Then there is one special configuration option in the IPsec-connection +sections for Phase 2 of the configuration file, named Next-hop, which +should be set to the next hop's IP address along the way to the peer: + +Next-hop= I.J.K.L + +This is specific to the way FreeS/WAN works. |