Date: Thu, 26 Jan 2006 14:05:34 +0000 From: Vaida Bogdan <vaida.bogdan@gmail.com> To: Fernando Gleiser <fgleiser@cactus.fi.uba.ar> Cc: freebsd-security@freebsd.org Subject: Re: setting up vpn client on a freebsd workstation Message-ID: <12848a3b0601260605k668329b7n41b15f7958b5e27e@mail.gmail.com> In-Reply-To: <20060125145213.A65853@cactus.fi.uba.ar> References: <12848a3b0601221142r2161c20ka6d128ecf5c299aa@mail.gmail.com> <43D3E694.9040902@aeternal.net> <12848a3b0601230055h12b7169uce7f1fbb2f0da8e6@mail.gmail.com> <20060125145213.A65853@cactus.fi.uba.ar>
next in thread | previous in thread | raw e-mail | index | archive | help
My certificates are self-signed and they were signed by the same CA as
the server's.
What I did on the client:
ifconfig gif0 create
ifconfig gif0 tunnel aaa.aaa.aaa.aaa ccc.ccc.ccc.ccc
ifconfig gif0 inet xxx.xxx.xxx.xxx 192.168.1.1
What do I need to replace xxx.xxx.xxx.xxx with and how do I test it
works until this step?
External Interface External Interface (behind nat)
ccc.ccc.ccc.ccc 10.100.100.2
| |
--> VPN <--> Internet <--> FreeBSD Client (NATed extip: ddd.ddd.ddd.ddd)
|
FW-1 Protected Net
192.168.1.0/24
On 1/25/06, Fernando Gleiser <fgleiser@cactus.fi.uba.ar> wrote:
> On Mon, 23 Jan 2006, Vaida Bogdan wrote:
>
> > I don't need openvpn, I need IPSEC (KAME). So none of the proposed
> > solutions work.
> >
> > I am the "FreeBSD Client" in the configuration so I can't change the
> > server vpn implementation.
> >
>
> Some basic questions: are your certificates self-signed? are your
> certificates and the linux ones signed by the same CA? you need to send
> your certificate and your CA's certificate to the linux admin so s?he
> can install them in the linux box.
>
> For the local config, look here:
>
> http://ezine.daemonnews.org/200502/ipsec.html
>
>
> Hope this helps
>
>
> Fer
>
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?12848a3b0601260605k668329b7n41b15f7958b5e27e>