IPSEC Web References
IPSEC links
This file is part of the documentation for the Linux FreeS/WAN project.
See the documentation index or project
home page for more information.
Sections:
The IPSEC Protocols
IPSEC overview documents or slide sets
IPSEC information in languages other than English
RFCs and other reference documents
-
Our document listing the RFCs relevant to Linux FreeS/WAN
and giving various ways of obtaining both RFCs
and Internet Drafts.
-
IPSEC standards page maintained by VPNC.
This covers both RFCs and Drafts, and classifies them in a fairly helpful way.
-
RFC archive
-
Internet Drafts
related to IPSEC
-
US government
site with their FIPS
standards
-
Archives of the ipsec@tis.com mailing list where
discussion of drafts takes place.
Background information on IP
IPSEC Implementations
Vendors of IPSEC Implementations
Lists of vendors
-
S/WAN is a multi-vendor Secure Wide Area Network
project based on the IPSEC protocols.
It has links to many IPSEC vendors and some free code.
-
The VPN Consortium
is a group for vendors of IPSEC products.
- Theodore Ts'o has an October 1997
list of 41 IPSEC implementations on his home page.
Vendors with Linux products
- Redcreek
provide an open source Linux driver for their PCI hardware VPN card. This
card has a 100 Mbit Ethernet port, an Intel 960 CPU plus more specialised
crypto chips, and claimed encryption performance of 45 Mbit/sec. The PC sees
it as an Ethernet board.
- According to a report on our mailing list,
Watchguard use Linux in their
Firebox product.
IPSEC in router products
- Cisco IPSEC information
- Ascend, now part of Lucent, have some IPSEC-based
products
- Bay Networks, now part of Nortel, use IPSEC
in their Contivity switch product line
- 3Com have a number of VPN
products, some using IPSEC
Operating systems with IPSEC support
All the major open source operating systems support IPSEC. See below for details on
BSD-derived Unix variants. Among commercial OS vendors, IPSEC
players include:
- Microsoft are putting
IPSEC in their Windows 2000 server product
- IBM announce a
release of OS390 with IPSEC support via a crypto co-processor
Open source IPSEC implementations
Other Linux IPSEC implementations
IPSEC for BSD Unix
IPSEC for other systems
Related Linux code
Add-ons and patches for FreeS/WAN
-
OpenBSD's isakmpd(8) daemon ported to Linux, working with the FreeS/WAN KLIPS code. At
time or writing (early May 1999), this is a snapshot of development work, not yet
a full release:
- a patch
to make IPSEC, PPTP and SSH VPNs work through a Linux firewall with
IP masquerade.
Note that this is not required if the same machine does IPSEC and masquerading,
only if you want a masquerade client to be the IPSEC gateway.
- patches to add
Blowfish, IDEA
and CAST-128 to FreeS/WAN.
- FreeS/WAN for the Linux Router Project,
a minimal Linux distribution designed to run on limited machines recylcled as routers.
At one point, the LRP code could boot from floppy and run on an 8 meg 386. We are not
certain if that is still true, but it certainly still runs on low-end machines.
Things FreeS/WAN uses or could use
Other approaches
Interoperability
Interoperability test sites
Interoperability results
Linux FreeS/WAN has undergone initial testing for interoperability with various other IPSEC implementations. Results to date are in our compatibility document. ICSA offer certification programs for various security-related products. See their list of certified IPSEC products. Linux FreeS/WAN is not currently on that list, but several products with which we interoperate are.
Click below to go to: