Secure WLAN Access - IPsec
  • IPsec support in OpenBSD 3.9 has been improved again
  • Simple configuration with ipsecctl and ipsec.conf(5)
  • One line per host, authentication using RSA-public keys
    • Using strong crypto by default (AES-256, SHA256, ...)
  • Strong defaults, you don't have to care about buttons
  • Ongoing work for OpenBSD 4.0
flow in from 192.168.39.0/24 to 192.168.39.0/24 type bypass
ike dynamic esp from 192.168.39.0/24 to 192.168.0.0/16 peer $my_peer
      
"Proactive Wireless Networks With OpenBSD", BSDCan 2006, Ottawa, Canada, 2006-05-13
Reyk Floeter (reyk@vantronix.net)
.vantronix | secure systems GmbH (http://www.vantronix.net/)