Posted in IPSec VPN

IPSec on FreeBSD – Part 5

Pf firewall rules The same tests were made on both machines with pf firewall turn on. You can see the content of /etc/pf.conf file in the next section: ## Firewall rules for IPSec ## ## ———————— ## ## define macro section ## ext_if = “em0” int_if = “em1” #lan_net =…

Continue Reading IPSec on FreeBSD – Part 5
Posted in IPSec VPN

IPSec on FreeBSD – Part 4

Test IPSec tunnels On FreeBSD2 run following command: ping  -S 10.2.1.1 10.1.1.1 On FreeBSD1 run following command:           tcpdump –nvi em0 host 10.27.62.169 and dst 10.27.62.18 You must see something like this: 10.27.62.169 > 10.27.62.18: ESP (spi=0x….)  # that means that traffic is encrypted Bandwidth tests and results Iperf will…

Continue Reading IPSec on FreeBSD – Part 4
Posted in IPSec VPN

IPSec on FreeBSD – Part 3

Configuration file  /usr/local/etc/raccoon/raccoon.conf On FreeBSD1 path pre_shared_key “/usr/local/etc/racoon/psk.txt”; # “log” specifies logging level.  It is followed by either “notify”, “debug” or “debug2”. #log debug; padding {     maximum_length 20;   # maximum padding length.     randomize off;       # enable randomize length.     strict_check off;    # enable strict check.     exclusive_tail off; …

Continue Reading IPSec on FreeBSD – Part 3