FreeBSD IPsec mini-HOWTO 22 Sep 2001 $Id: ipsec-howto.txt,v 1.6 2001/09/22 15:10:38 BKoester Exp $ $B0lHV2<$K99?7MzNr$,$"$j$^$9(B * KAME IPsec $B%H%s%M%k$N%3!<%I$r:G?7HG$K%"%C%W%0%l!<%I$7$F$/$@$5$$!#(B $B$=$&$G$J$$$H!"IT5,B'$K5/$3$k%3%M%/%7%g%sGK2u$GDK$$L\$K$"$$$^$9!#(B --------------------------------------------- 1. $B$O$8$a$K(B $B$3$N%A%e!<%H%j%"%k$N:G?7HG$O!"0J2<$N$H$3$m$G>o$Ke$G(B IPsec $B$rN)$A>e$2!"F0$+$7!"JL$N(B FreeBSD $B!J$d(B NetBSD $B$dB>$N(B KAME $BGI@8$N%9%?%C%/!K%^%7%s$d!"(BWindows 2000 $B%^%7%s$H(B $BAj8_@\B3$9$kJ}K!$NZ!"$=$7$F8BDj$5$l$?%H%i%U%#%C%/%U%m!<$N(B $BHkF?@-$G!J%7!<%1%s%9HV9f$K$h$k!K:FAw$+$i$NJ]8n$rJ]>Z$9$k$3$H$G!"%5%V%M(B $B%C%H4V$G%H%s%M%k$r9=C[$7$?$j!J%H%s%M%k%b!<%I!K!"$^$5$KFs$D$N%^%7%s4V$N(B $BDL?.$rJ]8n!J%H%i%s%9%]!<%H%b!<%I!K$G$-$^$9!#(BIPsec $BDL?.$O0U?^E*$K!"BP>N(B $BE*$J%"%k%4%j%:%`!J(BBlowfish, DES, 3DES$B!K$K$h$C$F0E9f2=$5$l$^$9!#$3$l$O(B ESP (Encapsulating Security Payload$B!'0E9f%Z%$%m!<%I(B) $B%b!<%I$H$7$FCN$i$l!"(B $B%Q%1%C%H$N%Z%$%m!<%I$,0E9f2=$5$l$^$9!#%Q%1%C%H$N%X%C%@$O?($l$i$l$:$=$N(B $B$^$^$G$9!#%H%i%U%#%C%/$r0E9f2=$9$k$D$b$j$,$J$$$J$i!"(BAH (Authenticaed Header$B!'G'>Z%X%C%@(B) $B%b!<%I$H$7$FCN$i$l$k5!G=$G(B IPsec $B$rMxMQ$G$-$^$9!#(B $B$3$N%b!<%I$G$O!"%Q%1%C%H$N%Z%$%m!<%I$O0E9f2=$5$l$^$;$s$,!"%X%C%@!&%U%#(B $B!<%k%I$,?.Mj@-$N$"$k%O%C%7%e4X?t$rMxMQ$7$F%O%C%7%e$5$l!"$3$N%O%C%7%eCM(B $B$r4^$`IU2C%X%C%@$,!"%Q%1%C%HFb$N>pJs$rG'>Z$G$-$k$h$&$K!"%Q%1%C%H$KDI2C(B $B$5$l$^$9!#(B $B$3$NJ8=q$O!"(BIPsec $B$NA4BN$N%"!<%-%F%/%A%c$d!"$=$N9=@.MWAG$N%W%m%H%3%k$K(B $B$D$$$F@bL@$9$k$b$N$G$O$"$j$^$;$s!J$$$:$l$9$k$+$b$7$l$^$;$s$,!K!#(B TCP $B%Q%1%C%H$r5;=QE*$K8+$k$H!"0J2<$N9=B$$K$J$j$^$9!J(BRFC2406 $B;2>H!K!#(B $B$=$N?^$r!"650iE*$JMQES$G!"$3$N(B RFC $B$+$i0zMQ$7$^$9!'(B ESP $BE,MQA0(B ---------------------------- IPv4 |orig IP hdr | | | |(any options)| TCP | Data | ---------------------------- ESP $BE,MQ8e(B ------------------------------------------------- IPv4 |orig IP hdr | ESP | | | ESP | ESP| |(any options)| Hdr | TCP | Data | Trailer |Auth| ------------------------------------------------- |<----- encrypted ---->| |<------ authenticated ----->| IPv6 $B$G$O!"$3$N$h$&$J?^$K$J$j$^$9!'(B ESP $BE,MQA0(B --------------------------------------- IPv6 | | ext hdrs | | | | orig IP hdr |if present| TCP | Data | --------------------------------------- ESP $BE,MQ8e(B --------------------------------------------------------- IPv6 | orig |hop-by-hop,dest*,| |dest| | | ESP | ESP| |IP hdr|routing,fragment.|ESP|opt*|TCP|Data|Trailer|Auth| --------------------------------------------------------- |<---- encrypted ---->| |<---- authenticated ---->| * = $BB8:_$9$k>l9g!"(BESP $B$NA0$K$b8e$m$K$b!"$=$NN>J}$K$bIU$-$&$k(B ESP $B$,$I$&F0:n$9$k$+$N%a%+%K%:%`$rM}2r$9$k$?$a$K!"2f!9$,$3$3$G9T$J$C$F(B $B$$$k$3$H$rCN$k$3$H$,=EMW$J$N$G!"(BSSH $B%H%s%M%k$dN`;w$N$b$N$rMQ$$$?$j$O$7(B $B$^$;$s!#$3$l$,(B ESP $B%X%C%@$N9=B$$G!"$"$J$?$,$I$3$+$GFI$s$@$3$H$N$"$k$+$b(B $B$7$l$J$$C18l$N$$$/$D$+$d$3$N?^$,!"(BESP $B$K$D$$$F$N99$J$kM}2r$N=u$1$K$J$k(B $B$G$7$g$&!#(B 0 1 2 3 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 2 3 4 5 6 7 8 9 0 1 +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ ---- | Security Parameters Index (SPI) | ^Auth. +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ |Cov- | Sequence Number | |erage +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | ---- | Payload Data* (variable) | | ^ ~ ~ | | | | |Conf. + +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ |Cov- | | Padding (0-255 bytes) | |erage* +-+-+-+-+-+-+-+-+ +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ | | | | Pad Length | Next Header | v v +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ ------ | Authentication Data (variable) | ~ ~ | | +-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+-+ * $B%Z%$%m!<%I!&%U%#!<%k%I$K4^$^$l$k>l9g!"(B $B0E9fF14|%G!<%?!JNc!'=i4|%Y%/%H%k!K(B $B!V%Q%G%#%s%0!W!V%7!<%1%s%9HV9f!W!V%Z%$%m!<%I!&%G!<%?!W$H$$$C$?8@MU$rJ9(B $B$$$?$3$H$,$"$j!"(Bracoon.conf(5) $B$+(B setkey(8) $B$NJ8=q$rFI$s$G$$$k$J$i!"$3(B $B$&$7$?>pJs$,(B ESP $B%X%C%@$N0lIt$G$"$j!"$=$l$,(B IPsec $B$H4X$o$j$,$"$k$3$H$,(B $B$*J,$+$j$G$7$g$&!#(B IPsec $B$re$G(B IPsec $B$rMxMQ$9$k$K$O!"(BFreeBSD 4.1 $B$+$=$l0J9_$N%P!<%8(B $B%g%s$r6/$/$*4+$a$7$^$9!#$3$l$h$jA0$N%P!<%8%g%s!JFC$K(B FreeBSD 3.x$B!KMQ$N(B KAME IPsec $B%3!<%I$bB8:_$7$^$9$,!"<+F080@_Dj$r9T$J$&(B racoon IKE (Internet Key Exchange$B!'<+F0808r49(B) $B%G!<%b%s$rMxMQ$9$k$K$O==J,$G$O$"$j$^(B $B$;$s!#(B $B%+!<%M%k$K(B IPsec $B$N%5%]!<%H$rDI2C$9$k$K$O!"%+!<%M%k@_Dj%U%!%$%k$K0J2<$N(B $B9T$rDI2C$7$F$/$@$5$$(B options IPSEC #IP security options IPSEC_ESP #IP security (crypto; define w/ IPSEC) options IPSEC_DEBUG #debug for IP security $B$5$i$K!"%H%s%M%k%b!<%I$G(B IPsec $B$rMxMQ$9$k>l9g$K$O!"%+!<%M%k@_Dj%U%!%$%k(B $B$K0J2<$N9T$r2C$($F$/$@$5$$!'(B FreeBSD 4.4 $B$h$jA0$N%P!<%8%g%s$G$O!'(B pseudo-device gif 4 FreeBSD 4.4 $B0J9_$J$i!'(B pseudo-device gif $B$H$9$k$+!"(Bgif $B$,4{$K%m!<%I2DG=$G$"$l$P!"2?$bI,MW$"$j$^$;$s!*(B $B?7$7$$%+!<%M%k$r:F%3%s%Q%$%k$7!"%$%s%9%H!<%k$7$F$/$@$5$$!#%+!<%M%k$N(B $B:F%3%s%Q%$%k$N;EJ}$,J,$+$i$J$$>l9g$O!"(BFreeBSD $B%O%s%I%V%C%/$r$4Mw$/$@$5$$!#(B ports $B$+$i(B racoon $B%G!<%b%s$r%$%s%9%H!<%k$7$F$/$@$5$$!'(B cd /usr/ports/security/racoon ; make all install clean $B$3$N(B mini HOWTO $B$r=q$$$F$$$k;~E@$K$*$$$F!"8=:_(B port $B$N:G?7HG$O!"(B racoon-20010831a.tar.gz $B$G$9!#Z%X%C%@!K$+(B ESP$B!J0E9f%Z%$%m!<%I!K(B $B%b!<%I$N$$$:$l$rMxMQ$9$k$+!"$I$N0E9f2=%"%k%4%j%:%`!"%O%C%7%e!&%"%k%4%j(B $B%:%`$rMxMQ$9$k$+$H$$$&$3$H$r%+!<%M%k$K65$($kItJ,$G$9!#(B $B$3$l$i$N7hDj$,!V%]%j%7!l9g!"(Bsetkey(8) $B%W%m%0%i%`$,!"(BSAD $B$KO$K$"$j$^$9!#(B 4. AH vs ESP$B!#%H%s%M%k(B vs $B%H%i%s%9%]!<%H!#(B $BF~/!9:.Mp$7$F$7$^$&$3$H$b$"$j$($^$9!#(BVPN $B$r9=C[$7$?$$$N$G$J$1$l$P!"(B ESP $B$r%H%i%s%9%]!<%H%b!<%I$GF0$+$;$PB?J,$h$$$G$7$g$&!#(B ESP $B$N%H%i%s%9%]!<%H%b!<%I$G$O!"(BIPsec $B$rMW5a$5$l$F$$$kCAw$5$l$k$N$G$O$J$$$3$H$KCm(B $B0U$7$F$/$@$5$$!*!!$=$&$G$J$/!"%+!<%M%kFbIt$N(B IPsec $B$N%3!<%I$,;XDj$5$l$?(B $B%]%j%7!<$K=>$C$F%Q%1%C%H$r2#Dj$7$?%N!<%I(B A $B$H(B B $B$KLa$j!"0J2<$N%M%C%H%o!<%/!&%H%]%m%8!<$r2>Dj$7$^$9!'(B Internal net A <-> Node A <-----> Internet <------> Node B <-> Internal net B $B$3$N>l9g(B $B%N!<%I(B A $B$NFbB&$N%"%I%l%9$O(B 10.10.10.1/24$B!"30B&$N%"%I%l%9$O(B 1.2.3.4 $B%N!<%I(B B $B$NFbB&$N%"%I%l%9$O(B 10.20.20.1/24$B!"30B&$N%"%I%l%9$O(B 5.6.7.8 $B$=$3$G%N!<%I(B A $B$K%]%j%7!<$r@_Dj$7$^$9!'(B #!/bin/sh # $B0J2<$N%3%^%s%I$,%N!<%I(BA$B$G(B IPsec $B$rF0$+$9$N$KI,MW(B # $B%H%s%M%k!&%G%P%$%9$N@_Dj!#(Bgif(4) $B$N%5%]!<%H$,A0Ds(B # gif0 $B$O(B 1.2.3.4 $B$+$i(B 5.6.7.8 $B$K@\B3(B gifconfig gif0 1.2.3.4 5.6.7.8 # $B%H%s%M%k$N!VFb!WB&$O!"(B10.10.10.1 $B$+$i(B 10.20.20.1 $B$K@\B3(B ifconfig gif0 inet 10.10.10.1 10.20.20.1 netmask 255.255.255.0 # $BDj(B network_interfaces="ep0 gif0 lo0" ifconfig_ep0="inet 1.2.3.4 netmask ..." # correct mask here ifconfig_gif0="inet 10.10.10.1 10.20.20.1 netmask 255.255.255.0" gif_interfaces="gif0" gifconfig_gif0="1.2.3.4 5.6.7.8" ... /etc/ipsec.conf: flush; spdflush; spdadd 10.10.10.0/24 10.20.20.0/24 any -P out ipsec esp/tunnel/1.2.3.4-5.6.7.8/require; spdadd 10.20.20.0/24 10.10.10.0/24 any -P in ipsec esp/tunnel/5.6.7.8-1.2.3.4/require; 4a Changes for FreeBSD 4.4 *NEW* Brooks Davis $B$,!"(BFreeBSD 4.4 $B%P!<%8%g%s$K$*$1$kJQ99$K$D$$$F$N>pJs(B $B$r65$($F$/$l$^$7$?!#>e$K5-=R$7$?!J(Bgif $B$K4X$9$k!K%+!<%M%k$NJQ99$,$"$j!"(B $B$3$3$K$=$NJQ99$r=q$-$^$9!'(B $B!D%3%s%Q%$%k$5$l$?(B gif $B%G%P%$%9$G$"$C$F$b!"<+J,$G%9%/%j%W%H$r:n@.(B $B$9$kI,MW$,$"$k$N$G!"%V!<%H;~$K$O$^$C$?$/5!G=$7$^$;$s!#$=$3$G!"(B $B%9%/%j%W%H$O0J2<$N$h$&$J$b$N$G$"$kI,MW$,$"$j$^$9!'(B ifconfig gif0 create # gifconfig $B$OL$$@M-8z$@$,!"8=:_$O(B ifconfig $B$G$=$N:n6H$r9T$($k(B ifconfig gif0 tunnel 5.6.7.8 1.2.3.4 # netmask $B$,K\Ev$K%]%$%s%H4V%j%s%/$rI=<($9$k$H$O;W$o$J$$(B ifconfig gif0 inet 10.20.20.1 10.10.10.1 $B$=$&$G$J$/!"%/!<%k$G?7$7$$@_Dj$r8+$;$S$i$+$7!"G$0U$N%$%s%?%U%'!<%95!G=(B $B$r:n@.$7$?$$$J$i!"0J2<$N$h$&$J$b$N$,;H$($^$9!'(B ifn=`ifconfig gif create` ifconfig ${ifn} tunnel 5.6.7.8 1.2.3.4 ifconfig ${ifn} inet 10.20.20.1 10.10.10.1 $B4{$K2??M$+$N?MC#$,:.Mp$7$F$^$9$N$G!"$3$NJQ99$K$D$$$F$N5-=R$r2C$($k$N$,(B $B$h$$$N$+$b$7$l$^$;$s!#(B 5. racoon $B$rMxMQ$7$?<+F0808r49(B $Bo$NMQES$K$O$A$g$C$H2aEY$G$9!#(B $B%m%0$r8:$i$9$?$a!"$=$N9T$N(B log "debug4"; $B$r(B log "info"; $B$KJQ99$7$^$9!#(Bfreebsd-net $B$N%a!<%j%s%0%j%9%H$N%9%l%C%I$G!"(Bracoon $B$K$h$j(B $B%M%4$5$l$k80$N$C$F!"!V(Bsainfo anonymous$B!W(B $B@a$K$"$k!"!V(Blifetime time$B!W$H!V(Blifetime byte$B!W%Q%i%a!<%?$r!"$=$l$>$l(B 3600 $BIC$H(B 50000 KB $B$KJQ99$7$?$$$H;W$&$+$b$7$l$^$;$s!#(B $B808r49$N2aDx$N0lIt$H$7$F!"Fs$D$N%N!<%I$,$$$/$D$+$NA0$b$C$F7h$a$F$*$$$?(B $BHkL)CM$rG'<1$7$F$*$/I,MW$,$"$j$^$9!#$3$l$O!"(BX.509 $B>ZL@=q$rM?$($k$+!"(B $B!JC1$K!KFCDj$N%F%-%9%H$N;vA06&M-80$K$h$C$FJ}$N%N!<%I$G!"(B/usr/local/etc/racoon/psk.txt $B%U%!%$%k$rJT(B $B=8$7$J$1$l$P$J$j$^$;$s!#(B psk.txt $B%U%!%$%k$K!"J}$N%^%7%s$G(B racoon $B$r3+;O$9$k(B $B$3$H$,$G$-$^$9!'(B /usr/local/sbin/racoon -f /usr/local/etc/racoon/racoon.conf $B$9$Y$F$&$^$/$$$C$?$J$i!"$I$A$i$N%[%9%H$K(B ping $B$9$k$N$b$&$^$/$$$/$O$:$G(B $B$9!#(Bracoon $B$N808r49$KC;$$CY1d$,@8$8$^$9$,!"%Q%1%C%H!&%U%m!<$r$_$k$3$H$,(B $B$G$-$^$9!#(Bracoon $B$N%m%0!&%U%!%$%k$O%G%U%)%k%H$G$O!"(B/var/log/racoon.log $B$K$"$j$^$9!#%m%0$r(B tail $B$9$l$P!"80$,8r49$5$l$k$N$r8+$k$3$H$,2DG=$G$9!#(B 6. Windows 2000 $B$H$NAj8_@\B3(B FreeBSD $B%^%7%s$K!"(BWindows 2000 $B%^%7%s$H(B IPsec $BDL?.$5$;$k$3$H$b2DG=$G$9!#(B Windows 2000 $B$HAj8_@\B3$9$k>l9g$K$O/$J(B $B$/!"0E9f80$N%S%C%H?t$b>.$5$$!K$N$rCN$C$F$*$/I,MW$,$"$j$^$9!#(B FreeBSD $B%^%7%s$H(B Windows 2000 $B%5!<%P!<4V$G0E9f2=%;%C%7%g%s$r@8@.$7$?$$(B $B>l9g$K9T$J$o$J$1$l$P$J$i$J$$$3$H$N$^$:0lHVL\$O!"F~\:Y$O!"(B @IT $B$N!V(BWindows 2000$B$N(BIPSec$B$G(B3DES$B$K$h$k0E9f2=$rM-8z$K$9$kJ}K!!W(B http://www.atmarkit.co.jp/fpc/pctips/030gethighencrypt/gethighencrypt.html $B$J$I$r;2>H$9$k$H$h$$!K(B $B>e=R$7$?DL$j$K!"(BIPsec $B$r4^$a$F%+!<%M%k$r:F%3%s%Q%$%k$7!"(Bsetkey(8) $B$r;H(B $B$C$F(B SAD $B$K%(%s%H%j$rDI2C$7!"(Bracoon $B$r@_Dj!"5/F0$7!"(BFreeBSD $B%^%7%s$r%;(B $B%C%H%"%C%W$7$F$/$@$5$$!#(B $B$^$:(B setkey $B$G4pK\@_Dj$r$7$J$1$P$J$i$:!"$=$l$+$i(B racoon $B$r;OF0$5$;$^$9!#(B $B$3$N%A%e!<%H%j%"%k$K$*$$$F>e=R$7$?4pK\@_Dj!J(Bsetkey $B%9%/%j%W%H!K$r9T$J$&(B $BA0$K$O!"(Bracoon $B$r;OF0$5$;$k$Y$-$G$O$"$j$^$;$s!#(B $B$3$3$G!"(BWindows 2000 $BMQ$KFC$KI,MW$J(B racoon $B$N@_DjK!$r>R2p$7$^$9!#(B $B0J2<$N@_Dj%U%!%$%k!J(Bmy-racoon.conf $B$H8F$S$^$9!K$r$4Mw2<$5$$!#$$$/$D$+=$(B $B@5$r9T$J$C$F$$$k$N$G!"85$N(B racoon.conf $B$H$O40A4$K$OF1$8$G$O$"$j$^$;$s!#(B racoon $B$N:G?7HG$rMQ$$$k$3$H$r!"2f!9$O$"$^$j=EMW;k$7$F$^$;$s!#(Bracoon $B$N(B $B3+H/$O!"%j%j!<%9$NEY$KB??t$N%P%0$HAj8_@\B3$NLdBj$,=$@5$5$l!"$+$J$j5^B.(B $B$K?J$s$G$$$^$9!#(B $B!V(Blog debug4$B!W%*%W%7%g%s$K$D$$$F$O!"J*8@$$$,$D$/$+$b$7$l$^$;$s$,!"$^$:(B $BBh0l$K2f!9$N;HL?$O!"0E9f2=DL?.$rN)$A>e$2!"2TF0$5$;$k$3$H$G$9!#$=$l$,$&(B $B$^$/$$$1$P!"@_Dj$d$=$N%*%W%7%g%s$r:GE,2=$9$l$P$h$$$N$G$9!#(B ------------------------------------------------------- path pre_shared_key "/usr/local/etc/psk.txt" ; log debug4; # "padding" $B$O%Q%G%#%s%0$K4X$9$k$$$/$D$+$N%Q%i%a!<%?$r@_Dj$7$F$$$k!#NE*0E9f%"%k%4%j(B $B%:%`MQ$N%;%C%7%g%s!&%-!<$,$H$F$bIQHK$KJQ99$5$l$kM}M3$J$N$G$9!#$=$N7k2L!"(B $B%;%C%7%g%s!&%-!<$N$$$:$l$+$,%/%i%C%/$5$l$k$3$H$G32$rHo$kDL?.$O>/$J$/$J(B $B$j$^$9!#$7$+$7(B Windows 2000 $B%^%7%s$K$O$$$/$D$+@)8B$,$"$j$^$9!#$"$^$j$K(B $B$bC;$$J}$+$i$9$l$P!"J,$JBS0hI}$H=hM}G=NO$,!"808r49$KHq$d$5$l(B $B$k$3$H$K$J$k$N$G$9!#(B $B$3$N%A%e!<%H%j%"%k$G>e=R$7$?DL$j!";vA06&M-!V80!W!J%Q%9%o!<%I!K$K$h$C$F!"(B $B!VHkL)%U%!%$%k!W$r:n$k$N$rK:$l$J$$$G$/$@$5$$!#(Bracoon $B$NMxE@$K!"%Q%9%o!<(B $B%ID9$K4X$9$k7W;;!J%Q%9%o!<%ID9$N%S%C%H?t$,(B 8 $B$G3d$j@Z$l$k$+!K$r$9$kI,MW(B $B$,$J$$$3$H$H!"%Q%9%o!<%I$rFs$D!J0l$D$OG'>ZMQ!"0l$D$O0E9f2=MQ!K;H$&I,MW(B $B$,$J$$$3$H$,$"$j$^$9!#(BWindows 2000 $B$G$O!"%Q%9%o!<%I$rFs$D;H$&$3$H$,$G$-(B $B$^$;$s!#DL?.MQ$K$?$@0l8D$N6&M-$9$kHkL)CM$r;}$A!"$=$l$OG'>ZMQ$H0E9fMQ$K(B $B%Q%9%o!<%I$rJL!9$KJ,$1$k$3$H$O$7$^$;$s!#(B $B%G%P%C%0$,L\E*$J$i!"(Bracoon $B$K0J2<$N%*%W%7%g%s$rIU$1$F5/F0$7$^$9!'(B racoon -F -v -f my-racoon.conf $B$3$l$K$h$j(B racoon $B$OI=$GF0$/$N$G!"8e$G<~CN$NLdBj$r2r@O$9$k$h$&$K!"%G%P(B $B%C%0!&%W%m%H%3%k$r%9%/%j!<%s>e$G8+$k$3$H$,$G$-$^$9!#(B Windows $B%^%7%s$G$O!"0J2<$N$B!V%9%J%C%W(B $B%$%s$NDI2C$H:o=|!W$K?J$`!#!V(BIP$B%;%-%e%j%F%#%]%j%7!<$N4IM}!W$KDI2C!#(B * $B%D%j!$B!V(BIP$B%;%-%e%j%F%#%]%j%7!<$N:n@.!W$rA*Br!#(B * $B%&%#%6!<%I$r40N;$9$k!#FC$K!"(B * $B%G%U%)%k%H$NJV?.%k!<%k$rM-8z$K$7$J$$(B * $B%W%m%Q%F%#$rJT=8(B * $B%W%m%Q%F%#$G!"?7$7$$%k!<%k$rDI2C$9$k$?$a!VDI2C!W%\%?%s$r%/%j%C%/!#%&%#%6(B $B!<%I$r40N;$7!"0J2<$N@_Dj$r3N$+$K$9$k!'(B * $B%k!<%k$O%H%s%M%k$r;XDj$7$J$$(B * $B%k!<%k$O(B LAN $B$KE,MQ(B * $B808r49$rJ]8n$9$k$?$a!"J8;zNs$rMxMQ$9$k!#(Bpsk.txt $B%U%!%$%k$K;X(B $BDj$7$?$N$HF1$880$GE}0l(B * BSD $B%^%7%s$X$N%H%i%U%#%C%/$K$N$_%;%-%e%j%F%#!&%]%j%7!<$rE,MQ(B $B$9$k$h$&$K!"?7$7$$(B IP $B%U%#%k%?$r@8@.$7$?$$$@$m$&$+$i!"$3$N?7(B $B$7$$%U%#%k%?$rA*Br(B * $B%U%#%k%?$NF0:n$H$7$F!"!V(BRequire Security$B!W$rA*Br(B $B!V(BRequire Security$B!WMQ$N@_Dj$r!"0J2<$N$h$&$K$7$^$9!#(B $B$$$/$D$+%k!<%k$,$"$k$N$G!"$3$N%*%W%7%g%s$K9g$C$?%k!<%k$r%A%'%C(B $B%/$9$k$+!"<+J,$G?7$7$$%k!<%k$r@8@.$7$F$/$@$5$$!'(B AH $B$OL58z(B ESP $B$N40A4@-$O(B MD5 $B0E9f2=%"%k%4%j%:%`$O(B 3DES $B:G=i$N%F%9%H$NL\E*MQ$K!"!V(BSession Key Settings$B!W$OL58z$K$7$^$9!#(B $B$=$l$O8e$GJQ99!":GE,2=$G$-$^$9!#(B * $B%3%s%H%m!<%k!&%Q%M%k$+$i(B Administrative Tools->Services selection $B$H(B $B?J$s$G!"(BIPsec $B%]%j%7!l9g$G$b!"$=$N%k!<%k$,E,59E,@Z$Ke$GM-8z$J%k!<%k$r(B $B%b%K%?2DG=$G$9!#(B * $B%3%^%s%I!&%&%#%s%I%&$r3+$-!"(BBSD $B%^%7%s$K(B ping $B$rBG$C$F$/$@$5$$!#$=$N(B ping $B$O!"!V(BNegotiating IP Security$B!W%a%C%;!<%8$,=P$F!V<:GT!W$7$^$9!#(B $B0z$-B3$$$F$b$&0lEY(B ping $B$rBG$D$H!":#EY$O$&$^$/$$$/$O$:$G$9!#(Bping $B$rBG(B $B$C$F$9$0!"BgNL$N%G%P%C%0!&%a%C%;!<%8$r=P$7$F$$$k(B BSD $B%^%7%s$r3NG'$9$k(B $B$3$H$,$G$-$^$9!#(B $B$3$3$K;j$C$F!"#2%^%7%s4V$NA4$F$N(B IP $B%H%i%U%#%C%/$,J]8n$5$l$k$3$H$K$J$j(B $B$^$7$?!#(B Windows $B%^%7%s>e$G$O!"(Bipsecmon $B%D!<%k$G0E9f2=%;%C%7%g%s$r3NG'$G$-$^$9!#(B BSD $B%^%7%s>e$G$O!"%G%P%C%0!&%a%C%;!<%8$rDI$&$3$H$G!"$9$Y$F$,$&$^$/$$$C(B $B$F$$$k$N$r3NG'$G$-$^$9!#(B BSD $B%^%7%s>e$G$O!"2f!9$,K>$`DL$j$K$9$Y$F$,$&$^$/$$$C$F$$$k$+3NG'$9$k$?(B $B$a$K!"@~>e$N%G!<%?$r%@%s%W$G$-$^$9!#(Bed0 $B$,Ev3:%$%s%?%U%'!<%9$J$i!"0J2<(B $B$N$h$&$J%3%^%s%I$G!"(B tcpdump -i ed0 -x -X -s 14400 $B@~>e$N%Q%1%C%H$rI=<($7$^$9!#(BWindows 2000 $B$H(B racoon $B4V$G$N(B IKE $B808r49$b!"(B ESP $B%Q%1%C%H$HI=<($5$l$k!"J}$H$b8+$k$3$H$,$G$-(B $B$^$9!#(B $B$b$7(B IPsec $B$NN)$A>e$2$KLdBj$,@8$8$F$$$k$J$i!"Cx@\%3%s%?%/%H$re5-(B RFC $B$r4^$`%;%-%e%j%F%#4X78$N(B RFC $B$NF|K\8lLu$O!"(B http://www.ipa.go.jp/security/rfc/RFC.html $B$K=8$a$i$l$F$$$k!K(B ------------ B. $BCxo$K%W%m%8%'%/%HJg=8Cf!K$G$N(B $B9b%Q%U%)!<%^%s%9$G%b%8%e!<%k2=$5$l$?%=%U%H%&%'%"3+H/$KFC2=(B $B$H(B Josh Tiefenbach (josh@zipperup.org) C. $B$=$NB>$N9W8%(B $B$3$NJ8=q$K4X$9$kDs8@!"=u8@!"Ci9p!"D{@5!"$=$7$F%U%#!<%I%P%C%/$O!"CxpJs(B $B$rDI2C$7!"=i?4c32$r5/$3$9D9;~4V$NCY1d$K$D$$$F(B Helge Oldach $B$+$i$N%Q%C%A$rE,MQ(B xx/06/2001 [bk] $B$$$/$D$+@0M}!"D{@5!#<+J,$N(B CVS $B%5!<%P$KJ8=q$rCV$-$^$7$?(B 21/06/2001 [bk] Tobias Larsson $B$,!"(Bspdadd $B$NItJ,$N%H%s%M%k$K4X$9$k8m$j(B $B$rJs9p$7$F$/$@$5$C$?$N$G!"=$@5(B ---------------- $BK\J8=q$NF|K\8lLu$O!"(Byomoyomo (ymgrtq at yamdas dot org) $B$,9T$J$C$?!#(B http://www.yamdas.org/wa/yamdas/column/technique/ipsec-howtoj.txt $B$K8x3+$5$l$F$^$9!#(B $BF|K\8lLu(B $B:G=*99?7F|!'(B2001$BG/(B10$B7n(B07$BF|(B