I am trying to set use IPsec to transport (not tunnel) between an XP client and Monowall. Because
the Monowall GUI does not allow setting this up I am trying to to use setkey to establish the
policy. When I enter the setkey commands (see below) in the monowall exec.php page I get the listed
reply. When I check the status.php there is no entries in the SPD or SAD, just like the commands
did not take.
(returns $ /usr/sbin/setkey -FP)
(returns $ /usr/sbin/setkey -F)
/usr/sbin/setkey -c spdadd 220.127.116.11/32 18.104.22.168/32 any -P out
(returns $ /usr/sbin/setkey -c spdadd 22.214.171.124/32 126.96.36.199/32 any -P out)
/usr/sbin/setkey -c ipsec esp/transport/188.8.131.52-184.108.40.206/require
(returns $ /usr/sbin/setkey -c ipsec esp/transport/220.127.116.11-18.104.22.168/require)
/usr/sbin/setkey -c spdadd 22.214.171.124/32 126.96.36.199/32 any -P in
(returns $ /usr/sbin/setkey -c spdadd 188.8.131.52/32 184.108.40.206/32 any -P in)
/usr/sbin/setkey -c ipsec esp/transport/220.127.116.11-18.104.22.168/require
(returns $ /usr/sbin/setkey -c ipsec esp/transport/22.214.171.124-126.96.36.199/require)
I replace 188.8.131.52 in the example with 192.168.2.1 (the ip of the WLAN nic)
I replace 184.108.40.206 in the example with 192.168.2.98 (the ip of the XP client)
I have tried adding " ; " to the end of each command and the results are the same.
I would appreciate any help on setting up the transport policy without using the GUI. Thanks, Bob.
Ring in the New Year with Photo Calendars. Add photos, events, holidays, whatever.