[nycbug-talk] road-warrior IPsec setup: looking for references

[Hubert Feyrer]

On Sat, 27 Aug 2005, Tillman Hodgson wrote:
> I've never worked with IPsec in a road warrior scenario (where one IP is
> unknown), only in transport mode to secure host-to-host activity on a
> local ethernet (where it's quite handy for things like NIS).
>
> Are there any good references out there that someone could point me too?

AFAIK the most recent (non-kame, now in ipsec-tools) racoon ship configs 
for that in src/racoon/samples/roadwarrior.

At least NetBSD has some files in 
http://cvsweb.netbsd.org/bsdweb.cgi/src/crypto/dist/ipsec-tools/src/racoon/samples/roadwarrior/, 
and some of the IPsec documentation in 
http://www.netbsd.org/Documentation/network/ipsec/rasvpn.html or 
http://www.netbsd.org/Documentation/network/ipsec/ may help you.
It should be useful with the latest IPsec-tools, which NetBSD has. Dunno 
how easy it is to get them on MacOS X or FreeBSD.

Good luck!


  - Hubert