Re: IPSec with AES

From: Hajimu UMEMOTO (ume@mahoroba.org)
Date: 04/23/02


Date: Tue, 23 Apr 2002 11:47:56 +0900
From: Hajimu UMEMOTO <ume@mahoroba.org>
To: adiana@ikhlas.com

Hi,

>>>>> On Mon, 22 Apr 2002 19:19:42 -0700 (PDT)
>>>>> nur adiana <adiana@ikhlas.com> said:

adiana> i would like to implement AES into my IPSec.. can i simply configure my setkey on FreeBSD like KAME does:

adiana> setkey -c <<EOF
adiana> add 10.1.1.1 20.1.1.1 esp 9876 -E rinjdael-cbc "hogehogehogehoge";
adiana> add 20.1.1.1 10.1.1.1 esp 10000 -E rinjdael-cbc oxdeadbeefdeadbeefdeadbeefdeadbeef;
adiana> spdadd 10.1.1.1 20.1.1.1 any -P out ipsec esp/transport//use;
adiana> EOF

Yes.

adiana> or, i must edit my racoon? tq..

Is there any problem?

--
Hajimu UMEMOTO @ Internet Mutual Aid Society Yokohama, Japan
ume@mahoroba.org  ume@bisd.hitachi.co.jp  ume@{,jp.}FreeBSD.org
http://www.imasy.org/~ume/
To Unsubscribe: send mail to majordomo@FreeBSD.org
with "unsubscribe freebsd-security" in the body of the message