Skip site navigation (1)Skip section navigation (2)
Date:      Sat, 26 Apr 2003 15:59:01 -0400
From:      Paul Lathrop <plathrop@mqtweb.com>
To:        freebsd-questions@freebsd.org
Subject:   IPSec, Racoon, and roaming clients
Message-ID:  <8694C4E4-7821-11D7-B94A-000393BF3DE2@mqtweb.com>

next in thread | raw e-mail | index | archive | help
I have recently been asked to implement VPN access for some of our 
roaming employees. Our gateway is a FreeBSD 4.7 box that I administer. 
Our employees are all on cablemodem connections when they are out and 
about. I have discovered IPSec and racoon, of course, and dug through 
their documentation. I have also read several very good tutorials on 
the web. The trouble I am having is that all the information I can find 
is for setting up a VPN tunnel between two gateways. What I need is a 
VPN connection between a roaming host (with a dynamic IP) and our VPN 
gateway (static IP) which will allow access to the internal network 
behind that gateway (private IP addresses). I have successfully 
established the VPN connection between a roaming host and the gateway, 
but without access to the internal network. I can't seem to figure out 
how to tell setkey to configure a tunnel into the network without 
knowing ahead of time what the client's IP will be.

Can anybody give me some pointers?

Thanks,
Paul D. Lathrop



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?8694C4E4-7821-11D7-B94A-000393BF3DE2>