This is an old revision of the document!

IPSec for FreeBSD's jails communication

Abstract: Here we assume we have two FreeBSD hosts, A using public IP 1.1.1.1 and internal virtual net 192.168.3.0 for jails, and B using public IP 2.2.2.2 and internal net 192.168.6.0 for jails.

  • Compile a custom kernel with the following additional options
options         IPSEC
options         IPSEC_FILTERTUNNEL
device          crypto
# cd /usr/ports/sysutils/ipsec-tools/
# make install