The FreeBSD network stack which is part of eCos can be configured to use IPSEC to provide more secure communications between Internet hosts. IPSEC can be used with both IPv4 and IPv6. Due to the restrictions imposed by various countries on the exportation and importation of cryptographic software, it has been decided to distribute the crypto parts of FreeBSD IPSEC separately from the rest of eCos. Before IPSEC can be enabled the eCos package bsd_crypto must be installed. This package can be found on the eCosCentric server at ftp.ecoscentric.com:/pub/contrib. Once the package has been downloaded it must be installed using the ecosadmin.tcl script. When the bsd_crypto package has been installed, the building of IPSEC will automatically be enabled when the FreeBSD stack is used. It can be disabled using the configuration option CYGPKG_NET_IPSEC. There are no other configuration options for IPSEC as a whole. In order to use IPSEC, connections must be configured. This can be performed using setsockopt() calls. A more convenient way is the use the libipsec library from the KAME distribution. eCos contains a snapshot of this library, which is documented else where. The aim is to also port the racoon daemon to eCos in the near future. It should be noted that the FreeBSD stack in eCos is quite old. IPSEC and IPv6 have continued to develop. It is quite possible there could be interoperabilty problems when using the IPSEC implementation in eCos with more modern implementations. It should also be noted that IPSEC, libipsec etc are currently work in progress items. &net-ipsec-libipsec-libipsec-manpages-sgml;