secure traffic in 1 direction
From: Matthias (matthias_at_blankenhaus.com)
Date: 10/28/04
- Next message: bruce: "Blocking AOL chat without blocking AOL webmail"
- Previous message: \: "Re: Debating : FIREWALLS - "Commercial Product" or "Free Software" ?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: 28 Oct 2004 14:29:13 -0700
Hello !
I am using IPSEC to implement security policies. I am trying to
secure ICMP traffic (for testing purposes) between two hosts in only
one direction using transport mode. In other words, I want the ICMP
request to be IPsec'ed and the ICMP reply not. Here is my
configuration:
Node 10.1.1.201:
{
laddr 10.1.1.201
raddr 10.1.1.200
ulp icmp
dir in
} ipsec {
auth_algs SHA1
sa unique
}
Node 10.1.1.200:
{
saddr 10.1.1.200
daddr 10.1.1.201
ulp icmp
} apply {
dir out
auth_algs SHA1
sa unique
}
On 10.1.1.200 when I issue a "ping 10.1.1.2001" it hangs ? Is my
config screwed up or is this in general not possible with IPSEC ?
Thanx a lot,
Matthias
- Next message: bruce: "Blocking AOL chat without blocking AOL webmail"
- Previous message: \: "Re: Debating : FIREWALLS - "Commercial Product" or "Free Software" ?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
