Next Previous Contents

FreeBSD VPN HOWTO

Anton R. Ivanov: ai1-u at sigsegv.cx

This document tries to cover as much of the currently available FreeBSD VPN functionality paying attrention to some of the most common problems and caveats. It does not try to cover all of them and it does not try to be a "cookbook". If you want to cut and paste without understanding what are you doing you are in the wrong place. You should use a suitable commercial solution instead. One of these ( 1, 2, 3) will do nicely.

1. Introduction and Disclaimers

2. Structure of this Document

3. Design Considerations

3.1 VPN for infrastructure
3.2 VPN for RAS

4. VPN Technologies Supported on FreeBSD

4.1 IPSEC
4.2 IP in IP
4.3 PPP in TCP
4.4 GRE
4.5 PPTP
4.6 L2TP
4.7 SSL/TLS Layer2/Layer3 VPNs (non PPP)

5. Implementation

5.1 Certificate Authority.
5.2 BSD Kernel and setting policies
5.3 Ports Providing VPN Functionality

6. Network and Client Notes

6.1 Bridging and ProxyArp versus Routing
6.2 Dealing With Unreachable Entries in a WINS environment
6.3 Dealing with Certificates under Windows
6.4 IPSEC policies under Windows

7. TODO

Next Previous Contents