Bug 215172 - update the ipsec portion of the handbook
Summary: update the ipsec portion of the handbook
Status: New
Alias: None
Product: Documentation
Classification: Unclassified
Component: Books & Articles (show other bugs)
Version: Latest
Hardware: amd64 Any
: --- Affects Only Me
Assignee: freebsd-doc (Nobody)
URL:
Keywords:
Depends on:
Blocks:
 
Reported: 2016-12-09 10:49 UTC by herminio.hernandezjr
Modified: 2016-12-09 10:49 UTC (History)
1 user (show)

See Also:

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description herminio.hernandezjr 2016-12-09 10:49:28 UTC 
I followed the Handbook's guide in setting up an ipsec VPN (Ch13.7). The guide has you set up two files /usr/local/etc/racoon/racoon.conf and /usr/local/etc/setkey.conf. The first defines the tunnel settings and second sets up the SDP (Security Policy Database). The first thing I noticed was there was no explanation on setting up the preshare key file (psk.txt). This was located in the man page for racoon.conf. However after verifying all the settings were correct I tested my tunnel and I kept running into this error

 ERROR: no policy found: 192.168.254.0/24[0] 10.134.0.0/16[0] proto=any dir=in

I finally figured out that the error was saying there was no policy defined in the database. I set it in setkey.conf but it was never loaded. I looked in the man page for setkey and then ran the command 'setkey -v -f /usr/local/etc/racoon/setkey.conf'. This loaded the file and my tunnel came up. I think it would be a good idea to add this to the handbook in case others run into this issue.