The person who you really have to speak to is Andre Oppermann Unfortunatly he just left his job and so I don't have his new email address on me.. I wrote the basic driver for him and he has the legal side of it..
julian On Fri, 16 Nov 2001, Shoichi Sakane wrote: > > What about info in regards to running a FreeBSD IPSEC server (racoon) > > with DHCP clients (road warriors)? I haven't seen anything about that...is it > > possible? If so...any links to info? Thanks in advance. > > racoon can exchange SAs in such a scenario by using "generate_policy" > directive. but there is no documentation. the only one is probably > racoon.conf(5). you know there are some scenario about "road warriors". > also, IKE and IPsec have many tweaks. so there are some solutions to > solve scenarios. here is one of them. > > i'm using a laptop PC and the ip address is assigned dynamically. > i access to the mail server from my laptop. i only use the ipsec > transport mode. i use certificates because this is the way to solve > the scenario with IKE main mode. i attach my configuration to this mail. > > 1. racoon.conf in the laptop. > 2. policy parameter in the laptop. > 3. racoon.conf in the server. > no need server's policy configuration. > > it hope it help you. > > regards, > To Unsubscribe: send mail to [EMAIL PROTECTED] with "unsubscribe freebsd-net" in the body of the message
