Iphone ipsec vpn linux
In this post, I will configure an IPSEC VPN tunnel between Iphone using Aggressive mode.

A good guide on IPSEC is "Ipsec Illustrated" found here: http://www.unixwiz.net/techtips/iguide-ipsec.html

Basically, Aggressive mode uses less messages in phase1 to establish the tunnel than Main mode (3 vs 6) and it is less secure. Less secure in the fact that the ike identity is sent in clear text.

The IKE ID can be one of the ...

After setting up the IPSec tunnel between the two FreeBSD hosts (FreeBSD-A and FreeBSD-B) in part 1 (http://forum.ivorde.ro/freebsd-to-freebsd-ospf-over-gre-over-ipsec-transport-mode-racoon-part-1-t860.html using gre0 interfaces on both nodes, in this part I set up OSPF.

The relevant OSPFD configuration (quagga) on both nodes is simple. This is for FreeBSD-A node:




Ospf "hello" packets ...

PART 1: FreeBSD to FreeBSD - OSPF over GRE over Ipsec (racoon)


How to run OSPF routing protocol between two FreeBSD routers/servers.

Since multicasting is not supported by racoon (ipsec-tools) IPSEC in tunel mode, this ball needs to be played using Ipsec transport mode and GRE tunnels.

A little ipsec background from Ipsec illustrated (http://www.unixwiz.net/techtips/iguide-ipsec.html). Quote: