**This is an old revision of the document!**

IPSec for FreeBSD's jails communication

Abstract: Here we assume we have two FreeBSD hosts, A using public IP 1.1.1.1 and internal virtual net 192.168.3.0 for jails, and B using public IP 2.2.2.2 and internal net 192.168.6.0 for jails. 

* [[http://www.freebsd.org/doc/en/books/handbook/kernelconfig-building.html|Compile]] a custom kernel with the following additional options
options         IPSEC
options         IPSEC_FILTERTUNNEL
device          crypto
# cd /usr/ports/sysutils/ipsec-tools/
# make install