os/doc
3
0
Fork 0
Code Issues Pull requests Projects Releases Wiki Activity

Replace remaining ASCIIs in IPsec section with images.

Browse source
This commit is contained in:
Marc Fonvieille 2003-08-15 12:28:17 +00:00
parent a7f321a514
commit 391f2d38b7
Notes: svn2git 2020-12-08 03:00:23 +00:00 
svn path=/head/; revision=17872
2 changed files with 33 additions and 6 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

3
en_US.ISO8859-1/books/handbook/Makefile
View file

@ -104,6 +104,9 @@ IMAGES_EN+= install/example-dir3.eps
IMAGES_EN+= install/example-dir4.eps
IMAGES_EN+= install/example-dir5.eps
IMAGES_EN+= security/ipsec-network.pic
IMAGES_EN+= security/ipsec-crypt-pkt.pic
IMAGES_EN+= security/ipsec-encap-pkt.pic
IMAGES_EN+= security/ipsec-out-pkt.pic
IMAGES_EN+= vinum/vinum-concat.pic
IMAGES_EN+= vinum/vinum-mirrored-vol.pic
IMAGES_EN+= vinum/vinum-raid10-vol.pic

36
en_US.ISO8859-1/books/handbook/security/chapter.sgml
View file

@ -3534,19 +3534,33 @@ ipfw add 1 allow udp from W.X.Y.Z to A.B.C.D isakmp
<para>So if your outgoing packet started looking like this:</para>
<screen>
<mediaobject>
<imageobject>
<imagedata fileref="security/ipsec-out-pkt" align="center">
</imageobject>
<textobject>
<literallayout class="monospaced">
.----------------------.
| Src: 192.168.1.1 |
| Dst: 192.168.2.1 |
| &lt;other header info&gt; |
+----------------------+
| &lt;packet data&gt; |
`----------------------'</screen>
`----------------------'</literallayout>
</textobject>
</mediaobject>
<para>Then it will be encapsulated inside another packet, looking
something like this:</para>
<screen>
<mediaobject>
<imageobject>
<imagedata fileref="security/ipsec-encap-pkt" align="center">
</imageobject>
<textobject>
<literallayout class="monospaced">
.--------------------------.
| Src: A.B.C.D |
| Dst: W.X.Y.Z |
@ -3559,7 +3573,9 @@ ipfw add 1 allow udp from W.X.Y.Z to A.B.C.D isakmp
| +----------------------+ |
| | &lt;packet data&gt; | |
| `----------------------' |
`--------------------------'</screen>
`--------------------------'</literallayout>
</textobject>
</mediaobject>
<para>This encapsulation is carried out by the gif device. As
you can see, the packet now has real IP addresses on the outside,
@ -3671,7 +3687,13 @@ ipfw add 1 allow ipencap from W.X.Y.Z to A.B.C.D
<para>Outgoing packets will now look something like this.</para>
<screen>
<mediaobject>
<imageobject>
<imagedata fileref="security/ipsec-crypt-pkt" align="center">
</imageobject>
<textobject>
<literallayout class="monospaced">
.------------------------------. --------------------------.
| Src: A.B.C.D | |
| Dst: W.X.Y.Z | |
@ -3691,7 +3713,9 @@ ipfw add 1 allow ipencap from W.X.Y.Z to A.B.C.D
| | `----------------------' | | -' | |
| `--------------------------' | -------------' |
`------------------------------' --------------------------'
</screen>
</literallayout>
</textobject>
</mediaobject>
<para>When they are received by the far end of the VPN they will
first be decrypted (using the security associations that have