On Thursday 20 March 2003 13:35, Junge, Stefan wrote:

Hi,

I tried to set up ipsec with instructions found via google. I have used the following docs http://www.freeswan.ca/docs/WindowsInterop/FS-W2K%20Interop.pdf http://tirnanog.ls.fi.upm.es/CriptoLab/Biblioteca/InfTech/IPsec%20between%20... http://www.freeswan.org/freeswan_trees/freeswan-1.99/doc/interop.html

I have still problems ... What are the problems ? In one of the above docs there is also a description of a registry key to enable debugging on the w2k side.

Is there any possebility to check wheter the gateway or the client is correct installed ?

You could first create a tunnel between 2 linux installations and get it working, then try to do it with w2k.

So, what is the best way to install ipsec on SuSE 8.0 ? Should I install the rpm packages shipped with SuSE 8.0 or the sources from freeswan ? I don't know if the rpms for SuSE 8.0 are patched with X.509. For connections to w2k you need X.509. I used the freeswan sources and X.509 and Delete_SA patches.

BTW: I only did host-to-host connections, so I cannot say if net-to-net works. Andreas Baetz

On Thursday 20 March 2003 13:35, Junge, Stefan wrote:

Hi,

I tried to set up ipsec with instructions found via google. I have used the following docs http://www.freeswan.ca/docs/WindowsInterop/FS-W2K%20Interop.pdf http://tirnanog.ls.fi.upm.es/CriptoLab/Biblioteca/InfTech/IPsec%20between%20... http://www.freeswan.org/freeswan_trees/freeswan-1.99/doc/interop.html

I have still problems ... What are the problems ? In one of the above docs there is also a description of a registry key to enable debugging on the w2k side.

Is there any possebility to check wheter the gateway or the client is correct installed ?

You could first create a tunnel between 2 linux installations and get it working, then try to do it with w2k.

So, what is the best way to install ipsec on SuSE 8.0 ? Should I install the rpm packages shipped with SuSE 8.0 or the sources from freeswan ? I don't know if the rpms for SuSE 8.0 are patched with X.509. For connections to w2k you need X.509. I used the freeswan sources and X.509 and Delete_SA patches.

BTW: I only did host-to-host connections, so I cannot say if net-to-net works. Andreas Baetz