Re: example of ipsecif and racoon?

[Andrew Cagney <andrew.cagney%gmail.com@localhost>]

On Fri, 27 Sept 2024 at 16:03, Hubert Feyrer <hubert%feyrer.de@localhost> wrote:
>
> Hi,
>
> does https://www.netbsd.org/docs/network/ipsec/ help?

No (but that does remind me, the example section needs an update).

These are the references I'm using:

https://man.netbsd.org/ipsecif.4
- the msgid can't be manipulated
- the auto-generated policy is implicitly bound to the physical
interface; which is, cough, old school

https://man.freebsd.org/cgi/man.cgi?query=if_ipsec&sektion=4
- the msgid can be manipulated directly
- the auto-generated policy is bound to the ipsecN interface, and not
the physical interface

https://man.openbsd.org/sec
- which doesn't even bother with the policy; presumably it is left to
the IKE daemon which, hopefully, binds it to the ipsec interface

ip link add dev ipsec1 type xfrm dev eth1 if_id 0x1
- again policy is left to the IKE daemon and bound to the ipsec interface