Well you sure can get a setup working like the paper says BUT both the paper and the man page for ipsec.conf blithely state that you can do FQDN setups by using srcid fqdn and dstid fqdn and leave it at that without an example or any BNF so can see HOW you use those keywords.

I'd love to see the example ipsec.conf files redone with 1.2.3.4 replaced by A.example.net and 5.6.7.8 replaced by B.example.com

I've tried but without either an example or BNF it's very frustrating.

Man pages are often written by people who know the subject too well! Recipes too!

/R

[ reply ]

Link to this comment: http://www.securityfocus.com/comments/infocus/1859/476#476