linux-ipsec: Re:

Hello,

> I've tested IPSEC0.7,and it was OK. After running pluto on FW2,

First, pluto must be active on both ends.

> I run whack as follows:

If Pluto runs with some debug output (default in 0.7, as I remember), you should at least get some information from FW1's pluto now. (also be shure to place the shared secrets in "isakmp-secrets" for FW1 and FW2).

> (1) Where are the resultant SAs placed;

If both Plutos finish their SA-exchange, with the goal=encrypt you will have these SAs in place automatically, check /proc/net/ipsec-route and /proc/net/ipsec-spi for active SAs and ERoutes.

> (2) How can I use the negotiated SAs to configure IPSEC(If there are
 

Do you need help?

In addition to our free technical library, Pantek provides professional IT services to companies who utilize Open Source software: Learn more about Pantek's Technical Support offerings Place an order for 24/7/365 Technical Support here Learn more about Pantek, who we are, and what we do Chat with a Live Operator Related lists.freeswan.org Links 1998-fall 1998-spring 1998-summer 1998-winter 1999-winter announce briefs bugs design freeswan-list hipsec ietf-sectest users users-admin Request more information about Pantek

see (1).

Greetings
Kai  

# Kai Martius                                                           #
# Dpt. of Medical CS and Biometrics / Dresden University of Technology  #
# PGP Fingerprint:  to be compared after download of my key             #