Re: IPSec and dynamic IP?

From: Cy Schubert - ITSD Open Systems Group (Cy.Schubert@uumail.gov.bc.ca)
Date: 04/03/01 

From: Cy Schubert - ITSD Open Systems Group <Cy.Schubert@uumail.gov.bc.ca>
To: mipam@ibb.net
Date: Tue, 03 Apr 2001 10:18:07 -0700

In message <20010403093047.B15044@bootp-20-219.bootp.virginia.edu>,
Mipam write
s:
> Eeeeh, small correction.
> Racoon does not support dynamic ip's now that is.
> I dont know if it will in the future, so my statement
> "it wont" could be very wrong, sorry.

I use pipsecd between home (@home) and work. Pipsecd does not support
IKE though it does support dynamic IP's. It also has the advantage of
allowing me to filter (IPF or IPFW) based on the encapsulating packet
via xl0 and the encapsulated packet via tun0.

Regards, Phone: (250)387-8437
Cy Schubert Fax: (250)387-5766
Team Leader, Sun/Alpha Team Internet: Cy.Schubert@osg.gov.bc.ca
Open Systems Group, ITSD, ISTA
Province of BC

To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message