Re: Alternatives for IPSec?

[Cedric Berger <cedric@wireless-networks.com>]

Jyri Hovila wrote:

>Hello everyone!
>
>I wasn't able to find anything on this from the archives, so:
>
>I'm having a problem with one ISP who does not allow customers to use
>ESP protocol. Are there any alternatives to IPSec for creating VPN
>tunnels between two OpenBSD 3.0 gateways?
>
For simple things, you can use SSH port redirection.
Now if you are a C programmer and want to pass ESP packet through
your ISP, you can easily write a small daemon that encapsulate ESP packet s
in UDP packets. It's a one-day development!
Cedric


>  On Linux there's Cipe but I
>haven't managed to find anything similar for OpenBSD. Cipe won't compile
>on OpenBSD: it requires Linux kernel source to be available so I suppose
>there's no way it could work with OpenBSD.
>
>Thanks in advance!
>
>Yours,
>
>Jyri