Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm trying to create an IPSEC tunnel between two machines (not between two networks). Using ipsec-tools, TUNNEL mode.

I think I can cope with all those add and spdadd, but how to create a virtual network interface for the IPSEC tunnel ? I want some services to listen (and initiate connections) on that virtual interface (just like all other VPNs designed).

I think I should do something like ifconfig <something> up... then my services will listen on that and the other machine will use, say and will connect using that interface. IPSEC will take the packets, encapsulate them etc.

Sane IPSEC documentation is something I were unable to find, and after so much trial and error I'm about to give-up.

share|improve this question

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.