Re: transport mode IPSec with Windows 7, static keys

2015-10-08 Thread Dr. Rolf Jansen
> Am 08.10.2015 um 11:18 schrieb VANHULLEBUS Yvan : > On Sat, Sep 26, 2015 at 08:30:57PM +0600, Victor Sudakov wrote: >> The two sysctls: >> >> net.key.preferred_oldsa=0 By the way, the actual sysctl oid is "net.key.prefered_oldsa" — preferred wrongly spelled with one 'r' only. ___

Re: transport mode IPSec with Windows 7, static keys

2015-10-08 Thread VANHULLEBUS Yvan
Hi. On Sat, Sep 26, 2015 at 08:30:57PM +0600, Victor Sudakov wrote: [.] > The two sysctls: > > net.key.preferred_oldsa=0 When there are more than one SA available (most common case is when a new SA is keyed as the old one becomes near to end of life), this sysctl tells the kernel which one t

Re: transport mode IPSec with Windows 7, static keys

2015-09-26 Thread Victor Sudakov
Victor Sudakov wrote: > > However, FreeBSD+racoon and Windows 7 with its builtin IPsec > PolicyAgent service work more or less (E: 3des-cbc, A: hmac-sha1) on > pre-shared secret. > > The only problem I have encountered is that after Windows reboot, > traffic stops flowing between FreeBSD and Wind

Re: transport mode IPSec with Windows 7, static keys

2015-09-24 Thread Victor Sudakov
Victor Sudakov wrote: > > Has anyone tried to set up transport mode IPSec with Windows 7 using > static keys? Hereby I declare that I have failed to setup static keys IPSec between FreeBSD and Windows. However, FreeBSD+racoon and Windows 7 with its builtin IPsec PolicyAgent service work more or

Re: transport mode IPSec with Windows 7, static keys

2015-09-22 Thread Victor Sudakov
Larry Baird wrote: > > > I use IKE when I have to, but would like to use static keys with > > Windows specifically, or at least would like to definitely know if it > > is at all possible or not. > Static keys are too weak from a security stand point. I can imagine situations where static keys ar

Re: transport mode IPSec with Windows 7, static keys

2015-09-22 Thread Victor Sudakov
Larry Baird wrote: > > > > Has anyone tried to set up transport mode IPSec with Windows 7 using > > static keys? > > > > I have trouble finding encryption and authentication algorithms > > mutually acceptable on FreeBSD and Windows 7. The latter can only do > > des or 3des for encryption and md5

transport mode IPSec with Windows 7, static keys

2015-09-22 Thread Victor Sudakov
Dear Colleagues, Has anyone tried to set up transport mode IPSec with Windows 7 using static keys? I have trouble finding encryption and authentication algorithms mutually acceptable on FreeBSD and Windows 7. The latter can only do des or 3des for encryption and md5 or sha1 for authentication, a