Day: June 15, 2017
IPSec on FreeBSD – Part 5
Pf firewall rules The same tests were made on both machines with pf firewall turn on. You can see the content of /etc/pf.conf file in the next section: ## Firewall rules for IPSec ## ## ———————— ## ## define macro section ## ext_if = “em0” int_if = “em1” #lan_net =…
IPSec on FreeBSD – Part 4
Test IPSec tunnels On FreeBSD2 run following command: ping -S 10.2.1.1 10.1.1.1 On FreeBSD1 run following command: tcpdump –nvi em0 host 10.27.62.169 and dst 10.27.62.18 You must see something like this: 10.27.62.169 > 10.27.62.18: ESP (spi=0x….) # that means that traffic is encrypted Bandwidth tests and results Iperf will…
IPSec on FreeBSD – Part 3
Configuration file /usr/local/etc/raccoon/raccoon.conf On FreeBSD1 path pre_shared_key “/usr/local/etc/racoon/psk.txt”; # “log” specifies logging level. It is followed by either “notify”, “debug” or “debug2”. #log debug; padding { maximum_length 20; # maximum padding length. randomize off; # enable randomize length. strict_check off; # enable strict check. exclusive_tail off; …