This file is part of the documentation for the Linux FreeS/WAN project.
See the documentation index or project
home page for more information.
IPSEC links
Sections of this document:
Other documents with links:
The IPSEC Protocols
IPSEC overview documents or slide sets
IPSEC information in languages other than English
RFCs and other reference documents
-
Our document listing the RFCs relevant to Linux FreeS/WAN
and giving various ways of obtaining both RFCs
and Internet Drafts.
-
IPSEC standards page maintained by VPNC.
This covers both RFCs and Drafts, and classifies them in a fairly helpful way.
-
RFC archive
-
Internet Drafts
related to IPSEC
-
US government
site with their FIPS
standards
-
Archives of the ipsec@tis.com mailing list where
discussion of drafts takes place.
Analysis of IPSEC protocols
- Counterpane's evaluation of the protocols
- Simpson's
IKE Considered Dangerous
paper. Note that this is a link to an archive of our mailing list. There are several replies in addition to the paper itself.
Background information on IP
IPSEC Implementations
Vendors of IPSEC Implementations
Lists of vendors
-
S/WAN is a multi-vendor Secure Wide Area Network
project based on the IPSEC protocols.
It has links to many IPSEC vendors and some free code.
-
The VPN Consortium
is a group for vendors of IPSEC products.
- Theodore Ts'o has an October 1997
list of 41 IPSEC implementations on his home page.
Vendors with Linux products
- Redcreek
provide an open source Linux driver for their PCI hardware VPN card. This
card has a 100 Mbit Ethernet port, an Intel 960 CPU plus more specialised
crypto chips, and claimed encryption performance of 45 Mbit/sec. The PC sees
it as an Ethernet board.
- According to a report on our mailing list,
Watchguard use Linux in their
Firebox product.
- According to the Linux Administrator's
Security Guide, the Danish firm I-Data make
a firewall/VPN product based on Linux and FreeS/WAN.
IPSEC in router products
- Cisco IPSEC information
- Ascend, now part of Lucent, have some IPSEC-based
products
- Bay Networks, now part of Nortel, use IPSEC
in their Contivity switch product line
- 3Com have a number of VPN
products, some using IPSEC
Operating systems with IPSEC support
All the major open source operating systems support IPSEC. See below for details on
BSD-derived Unix variants. Among commercial OS vendors, IPSEC
players include:
- Microsoft are putting
IPSEC in their Windows 2000 server product
- IBM announce a
release of OS390 with IPSEC support via a crypto co-processor
Open source IPSEC implementations
Other Linux IPSEC implementations
IPSEC for BSD Unix
IPSEC for other systems
Interoperability
Interoperability test sites
Interoperability results
Linux FreeS/WAN has undergone initial testing for interoperability with various other IPSEC implementations. Results to date are in our compatibility document. ICSA offer certification programs for various security-related products. See their list of certified IPSEC products. Linux FreeS/WAN is not currently on that list, but several products with which we interoperate are.
Click below to go to: