From owner-IPv6-jp@jp.freebsd.org  Wed Nov 10 22:11:09 1999
Received: (from daemon@localhost)
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) id WAA30738;
	Wed, 10 Nov 1999 22:11:09 +0900 (JST)
	(envelope-from owner-IPv6-jp@jp.FreeBSD.org)
Received: from kame195.kame.net (kame195.kame.net [203.178.141.195])
	by castle.jp.freebsd.org (8.9.3+3.2W/8.7.3) with ESMTP id WAA30733
	for <IPv6-jp@jp.freebsd.org>; Wed, 10 Nov 1999 22:11:09 +0900 (JST)
	(envelope-from sakane@ydc.co.jp)
Received: from ghost.wide.ydc.co.jp (stat44-lt128.lt.ietf.innovationslab.net [130.128.44.128])
	by kame195.kame.net (8.9.3+3.2W/3.7W) with ESMTP id VAA08032
	for <IPv6-jp@jp.freebsd.org>; Wed, 10 Nov 1999 21:52:02 +0900 (JST)
Received: (from sakane@localhost)
	by ghost.wide.ydc.co.jp (8.8.8/3.7W) id WAA00742;
	Wed, 10 Nov 1999 22:09:17 +0900 (JST)
Date: Wed, 10 Nov 1999 22:09:17 +0900 (JST)
From: Shoichi Sakane <sakane@ydc.co.jp>
Message-Id: <199911101309.WAA00742@ghost.wide.ydc.co.jp>
To: IPv6-jp@jp.freebsd.org
In-Reply-To: Your message of "Tue, 09 Nov 1999 03:49:08 +0900"
	<19991109034908A.msan@wave.csse.muroran-it.ac.jp>
References: <19991109034908A.msan@wave.csse.muroran-it.ac.jp>
X-Mailer: Cue version 0.6 (991109-1129/sakane)
Mime-Version: 1.0
Content-Type: Text/Plain; charset=iso-2022-jp
Reply-To: IPv6-jp@jp.freebsd.org
Precedence: list
X-Distribute: distribute version 2.1 (Alpha) patchlevel 24e+990727
X-Sequence: IPv6-jp 335
Subject: [IPv6-jp 335] Re: set up IPsec
Errors-To: owner-IPv6-jp@jp.freebsd.org
Sender: owner-IPv6-jp@jp.freebsd.org
X-Originator: sakane@ydc.co.jp

> $B8=:_!"8&5f<<$N(B2$BBf$N%[%9%H4V$G@_Dj$r?'!9$H$$$8$C$F$$$k$h$&$J>uBV(B
> $B$J$N$G$9$,!"(BESP$B$N%H%i%s%9%]!<%H%b!<%I$r@_Dj$7$?;~$O(Btcpdump$B$G%Q%1(B
> $B%C%H$r8+$?$j!"(Bnetstat$B$G@_Dj$G$-$F$$$k$3$H$,3NG'$G$-$?$N$G$9$,!"(B
> $B2?8N$+G'>Z%X%C%@$O@_Dj$7$?$D$b$j$G$b$$$D$b<:GT$7$F$$$^$$$^$9!#0l(B

> $B%[%9%H$N(BOS$B$H(BKAME$B$N%P!<%8%g%s(B:$B6&$K(BFreeBSD3.1+KAME19990517-release 

snap $B$r;H$($J$$M}M3$O$"$j$^$9$+!)(B
KAME$B$N(BIPsec policy $B$^$o$j$O:#$@7c$7$/=$@5$7$F$$$^$9!#(B
I/F$B$,JQ$o$k$3$H$b$"$C$F?=$7Lu$J$$$N$G$9$,!"(B
$B$G$-$k$@$1?7$7$$$N$r;H$&J}$,NI$$$G$9!#(B

> $BG'>Z%X%C%@$r@_Dj$7$h$&$H$7$?%3%^%s%I(B
> HostA:
> setkey -c <<EOF
> add adress(hostA) address(hostB)[23] any -p ah -A hmac-md5 "hogehoge";
> add address(hostB) address(hostA)[23] any -p ah -A hmac-md5 "hogehoge";

B[23] -> A $B$N(B SA $B$O(B
  add address(hostB)[23] address(hostA) any -p ah -A hmac-md5 "hogehoge";
$B$G$O$J$$$G$9$+!)(B

> spdadd address(hostA) address(hostB) any -P none:none:use:none;

AH transport mode $B$@$H(B
  spdadd address(hostA) address(hostB) any -P none:use:none:none;
$B$G$9!#(B
