Re: WLAN access point, IPsec

[Pedro la Peu <pedro@am-gen.org>]

> what "minimum" requirements would a WLAN access point box using
> OpenBSD and a PRISM2.5 card in HostAP mode have, if using no WEP,
> but IPsec?

For the hostap part, there's very little additional overhead. For the IPsec 
part, it depends on traffic, average packet sizes, suites used etc.

> Can IPsec use blowfish as cipher safely?

Not sure what you mean by 'safely', sorry.

> The box I have here is a Pentium-100, 128 MiB RAM, but it serves

Well, I have plenty of P2-200's w/32MB doing hostap, PF and IPsec with 
multiple S/A's and they seem mostly asleep. All use the following:

[Default-main-mode]
DOI=                    IPSEC
EXCHANGE_TYPE=          ID_PROT
Transforms=             3DES-SHA-RSA_SIG

[Default-quick-mode]
DOI=                    IPSEC
EXCHANGE_TYPE=          QUICK_MODE
Suites=                 QM-ESP-AES-SHA-PFS-SUITE

-p