Re: openswan vpn
From: Alex Harsch (infodude_at_gmx.de)
Date: 08/31/04
- Previous message: Clifford Kite: "Re: pppd without dialup"
- In reply to: Luke Matthews: "openswan vpn"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Date: Tue, 31 Aug 2004 18:40:45 +0200
Luke Matthews wrote:
> I need to set up a vpn connection between, lets say company A and
> company B. I work for company A, and company B has told us that that we
> can use whatever software we want as long as it is IPSec compliant.
^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^
They didn't say that, did they?
> I
> was having a look around and came across http://www.openswan.org. So
> does openswan do the client end as well, or does it only do the server
> part? Or is it just both? I was thinking about using it to set up the
> the connection from company A to company B, but wanted to know for sure
> if this is doable before going through the trouble. On the openswan site
> it says it's "an implementation of IPsec for Linux" so I'm guessing it
> would do exactly what I need, but I'm a total noob when it comes to any
> kind of VPN stuff.
I think you can not speak about a server or client. You have to establish a
tunnel and transfer data. So a gateway is actually both.
>
> I have no idea if this would connect to another Linux box or Windows
> box, wasn't given all the details yet, but would like to find a solid
> solution and start figuring out how to get it all set up. I want it so
> that when I have all the connection specifics I can set it up in the
> shortest amount of time possible. Am I steering myself in the right
> direction here? Any thoughts on the matter would be appreciated, thanks!
This could work. But it definetly depends on the ipsec implementation on the
other side. There are so many vendor specific implemntations, that could
give you a hard time or make it even impossible. For example, the
Watchguard box in my companies office will accept connection from clients
with dynamic ips only using the aggressive mode negotiations. Most
implementations find this to be insecure and don't implement it. Bad luck.
>
> On a side note, I tried out openvpn and successfully made a connection
> between two test machines before reading that it isn't IPSec
> compliant...doh! lol
>
> --Luke
You propably best of by byting the bullet and start out with freeswan. It is
a little bit harder to configure but can do all the stuff you will need.
Good luck, Luke.
Regards, Alex
- Previous message: Clifford Kite: "Re: pppd without dialup"
- In reply to: Luke Matthews: "openswan vpn"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ]
Relevant Pages
|
