Create manual IPSec policy on Window (like spdadd and add on Linux)

Posted by hapalibashi on Server Fault See other posts from Server Fault or by hapalibashi
Published on 2009-10-13T20:41:04Z Indexed on 2010/03/18 2:01 UTC
Read the original article Hit count: 397

Filed under:
|

Hello

On Linux it is possible to create an a manual IPSec (no IKE etc) tunnel thus:


spdadd 192.168.0.10/32[5066] 192.168.0.11/32[5064] udp -P in ipsec esp/transport//require;
add 192.168.0.10 192.168.0.11 esp 2222 -m transport -E des-ede3-cbc "123456789012123456789012" -A hmac-md5 "1234567890123456";

I need to do the same on Windows. I am aware of netsh but I don't think its equivalent, I need to specific the SPI (thats the 2222 above) and this seems impossible.

Any ideas or alternatives?!

Thanks,

Stuart.

© Server Fault or respective owner

Related posts about ipsec

Related posts about Windows