All,

I had recently been contacted by a user that was attempting to use my free 2K/XP IPSEC client with pfsense. The racoon key daemon was tripping up over a modecfg exchange that wasn't supported by the version of ipsec-tools installed. My reference gateway platform is FreeBSD so I think he assumed that most options supported by ipsec-tools and FreeBSD would be available in pfsense. I wasn't sure, so I thought I would post a question to the list.

What IPSEC features does pfsense support via its web config interface and are there plans to support the more advanced IPSEC client access feature of racoon? The ipsec-tools project is about to branch for a 0.7 release which contains a lot of new stuff. Mostly, the changes are related to dynamic client configuration and enhanced user authentication support. There is also an updated NAT Traversal patch available for FreeBSD that works with FAST_IPSEC as well as the KAME IPSEC stack.

Thanks in advance,

-Matthew

---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]

Reply via email to