Help needed configuring racoon

2003-01-17 Thread Mike Doyle
Hi,

I think I need a little help configuring a VPN using FreeBSD and
racoon. At the moment I have got as far as compiling an IPSec
enabled kernel, and running racoon. When I try to ping a
machine on the other end of the tunnel, racoon fails to negotiate
key exchange. On debug level 1, the message in the log file is:

 ERROR: pfkey.c:1604:pk_recvacquire(): failed to get sainfo.

For any experts out there, I would be happy to send copies of any
relevant log files and/or config files. However, given that these are
the two firewalls protecting my LANs, I don't want to post configuration
info to a public forum.

PS: I'm not subscribed to questions, but I do check the web-archives
so please email me directly if you're prepared to help.

 = 
Michael Doyleemail: [EMAIL PROTECTED]
Network Administratorpersonal email: [EMAIL PROTECTED]
Co-operation Ireland   http://www.cooperationireland.org/
Phone: +353-1-661 0588   Fax: +353-1-661 8456

*

To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message



RE: Help needed configuring racoon

2003-01-17 Thread Stacy Olivas
Check out the IPSEC how-to at:
http://www.x-itec.de/projects/tuts/ipsec-howto.txt

It's a good start and tells you some info on how to configure racoon in
FreeBSD to talk with a Win2K/XP
system.

Hope this helps.

 -Original Message-
 From: [EMAIL PROTECTED]
 [mailto:[EMAIL PROTECTED]]On Behalf Of Mike Doyle
 Sent: Friday, January 17, 2003 5:53 PM
 To: [EMAIL PROTECTED]; [EMAIL PROTECTED]
 Subject: Help needed configuring racoon


 Hi,

 I think I need a little help configuring a VPN using FreeBSD and
 racoon. At the moment I have got as far as compiling an IPSec
 enabled kernel, and running racoon. When I try to ping a
 machine on the other end of the tunnel, racoon fails to negotiate
 key exchange. On debug level 1, the message in the log file is:

  ERROR: pfkey.c:1604:pk_recvacquire(): failed to get sainfo.

 For any experts out there, I would be happy to send copies of any
 relevant log files and/or config files. However, given that these are
 the two firewalls protecting my LANs, I don't want to post
 configuration
 info to a public forum.

 PS: I'm not subscribed to questions, but I do check the web-archives
 so please email me directly if you're prepared to help.

  = 
 Michael Doyleemail: [EMAIL PROTECTED]
 Network Administratorpersonal email: [EMAIL PROTECTED]
 Co-operation Ireland http://www.cooperationireland.org/
 Phone: +353-1-661 0588   Fax: +353-1-661 8456

 *

 To Unsubscribe: send mail to [EMAIL PROTECTED]
 with unsubscribe freebsd-security in the body of the message


To Unsubscribe: send mail to [EMAIL PROTECTED]
with unsubscribe freebsd-questions in the body of the message