Re: replacement of security/ipsec-tools

2020-01-14 Thread Victor Sudakov
Karl Denninger wrote: > > > > For the present, however, I'm interested not in an IPSec VPN (in Windows > > terminology) but in a simple transport mode IPSec between a FreeBSD and a > > Windows host. > > > > My only option for that is IKEv1 because IKEv2 is configured on Windows > > 10 and Windows

Re: replacement of security/ipsec-tools

2020-01-13 Thread Karl Denninger
On 1/13/2020 10:26, Victor Sudakov wrote: > Karl Denninger wrote: > > [dd] > >> Strongswan works fine with Win10 HOWEVER note that Windows 10 until >> somewhat recently (last summer, I believe) and ALL PREVIOUS VERSIONS >> (e.g. Win7, 8, etc.) had a SEVERE problem with IkeV2 connections, which > Ka

Re: replacement of security/ipsec-tools

2020-01-13 Thread Victor Sudakov
Karl Denninger wrote: [dd] > > Strongswan works fine with Win10 HOWEVER note that Windows 10 until > somewhat recently (last summer, I believe) and ALL PREVIOUS VERSIONS > (e.g. Win7, 8, etc.) had a SEVERE problem with IkeV2 connections, which Karl, Thanks a lot for the detailed info. I may ne

Re: replacement of security/ipsec-tools

2020-01-11 Thread Karl Denninger
On 1/11/2020 05:23, Victor Sudakov wrote: > Victor Sudakov wrote: >>> If you ever find good documentation/howto for strongswan on FreeBSD, >>> please share with me. >> Really, please! I know there are people present here using strongswan. >> >> I would like to try and replace racoon with it. > Now

Re: replacement of security/ipsec-tools

2020-01-11 Thread Victor Sudakov
Michael Grimm wrote: [dd] > > Then this mail made my day: > > >> What do I need? > >>#) a VPN tunnel between two hosts > >>#) both local networks reachable from the remote host > > > > That is what kernel IPSec is for, you can even do it on static keys > > without any ISAKMP daemon lik

Re: replacement of security/ipsec-tools

2020-01-11 Thread Victor Sudakov
Victor Sudakov wrote: > > > > If you ever find good documentation/howto for strongswan on FreeBSD, > > please share with me. > > Really, please! I know there are people present here using strongswan. > > I would like to try and replace racoon with it. Now thanks to Sergey Matveev and some good