I'm not sure if my guess is correct. But instead of using windows over ipsec, i would use 2 FreeBSD boxes.
eg, Client Host -- [ipsec on bsd] -- (( wirless )) -- [ipsec on bsd to decrypt] -- (( internet )) Not sure if that's what you're trying to do, was a little hard to understand. If that is the case, there is a nice article on freebsd diary that covers this pretty well. http://www.freebsddiary.org/ipsec.php Regards, Lachlan -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] Behalf Of Nucleo de Pesquisa e Desenvolvimento Sent: Thursday, October 30, 2003 7:16 AM To: [EMAIL PROTECTED] Cc: [EMAIL PROTECTED] Subject: IPSEC in tunnel mode ( possible? ) Hi everyone, I know it is kind an off-topic question but maybe another network admin have already faced the following: client--[__ipsec__]--gw--[__ip__]--internet I, trying to secure a wireless link, want to have my clients using ipsec on the segment between the gateway gw and the machine itself even when the traffic is to the internet and not only to the gateway ( what works fine in transport mode anyway ). The clients are windows machines. Accordingly to Microsoft 252735 tunnel is possible when a windows is acting as a gateway, not our scenario where machines are only clients... Any one could point me to some url or send me keywords I should look for please? If things wonŽt work with ipsec IŽll do it with MPD... but I still should have ask it here. Thanks in advance ( and sorry for the cross posting ), -- =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Paiva, Gilson de Domingos Martins mailto:[EMAIL PROTECTED] Brazil http://www.el.com.br/ E&L Producoes de Software http://www.FreeBSD.org/ FreeBSD: The Power to Serve =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- _______________________________________________ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-isp To unsubscribe, send any mail to "[EMAIL PROTECTED]" _______________________________________________ [EMAIL PROTECTED] mailing list http://lists.freebsd.org/mailman/listinfo/freebsd-net To unsubscribe, send any mail to "[EMAIL PROTECTED]"
