Establishing a VPN connection (host to host) using IPSec services
 

Hi,i would like to establish a VPN connection which can hold either 'two' hosts..and secondly if that's done i would like to go for more number of users..Can i do it using IPSec services??if yes then how??

Please let me know..

Cheers!

openswan for ipsec, openvpn for ssl-vpn.

Establishing a VPN connection (host to host) using IPSec services Reply to Thread L
 

You mean to say go into the terminal and type those commands??

no, sorry. vpn's generally take some setup on both ends. see documentation at http://www.openswan.org and http://www.openvpn.org. most linux distros will have the software already compiled and ready to install, via yum/rpm or apt-get, etc, so don't bother downloading the software from those sites unless you need to.

establish a VPN connection using IPSec
 

i tried 'sudo apt-get install openswan' as you said but it says :

adithya@ubuntu:~$ sudo apt-get install openswan
[sudo] password for adithya:
Reading package lists... Done
Building dependency tree
Reading state information... Done
E: Couldn't find package openswan
adithya@ubuntu:~$

It shoud work for 'openvpn' because it suggested me to install 'openvpn' using apt-get..but will it provide IPSec services??

What should i do?

Adithya.

openvpn is ssl-vpn only. if you need ipsec then use openswan.

Openswan is there, I use it on my ubuntu systems. If you can't find it, search for it at http://packages.ubuntu.com/ to find out which repository to use. To do that, edit /etc/apt/sources (uncomment the appropriate lines) and run 'apt-get update', then 'apt-get install openswan'

Establishing a VPN connection (host to host) using IPSec services
 

I have installed openswan using what you said..but in the network connections when i say 'edit connections' and go to 'VPN tab' there are two options 'openvpn' and 'PPTP' which i had already installed ..how do i get VPN with IPSec (i.e. what i installed using 'openswan')..Do i need to use the 'import' option ? If yes then how do i import??What is the procedure for X.509 certification??

After installing openswan it said that the connections to the internet will be slow! Why??

I installed openswan as follows:

adithya@ubuntu:/$ sudo apt-get install openswan
Reading package lists... Done
Building dependency tree
Reading state information... Done
openswan is already the newest version.
0 upgraded, 0 newly installed, 0 to remove and 107 not upgraded.
adithya@ubuntu:/$

Adithya.

unfortunately I cannot help you learn openswan in a single forum thread. But I'll address your points.

VPN tab -- I don't know what distro or desktop you are using, but I assume that if ipsec is not showing up in your UI, then the UI does not support it. You will have to just edit the configuration files directly.

X509 is complex, please refer to the documentation.

Where does it say that? This is not generally true.

Good, it appears that it was already installed. You should be ready to start, but be prepared to read as there are numerous ways to configure openswan ipsec. Also be ready to build and edit configuration files using a text editor.

good luck.

Establishing a VPN connection (host to host) using IPSec services
 

I am using ubuntu 9.04 (Jaunty Jackalope Desktop version).I am still not able to configure VPN using IPSec as it doesn't show up in the extreme right top corner's Network Manager's VPN Tab.So i went for openvpn and VPN using PPTP..These two show up when i say 'Add' through Network Manager's VPN Tab..Then it says "Choose VPN connection type"..I selected PPTP..Then it asked me for 'gateway'..'username and password' which is optional..along with NT domain..What do i enter in these fields??I went into Advanced Tab and checked MPPE..and also checked "Connect automatically"..yet it doesn't show it connected..

My "DSL Connection" is working fine though..What can be the problem??

Please help.

Adithya.

by simple google searches on "gnome network manager vpn ipsec" I found the following:

from http://projects.gnome.org/NetworkManager/admins/
from http://www.nabble.com/Generic-IPSEC-...d22928260.html

At this point I think you need to do your own homework. You're asking me to teach you to drive by exchanging forum posts. VPNs can be complex and are network-specific, there is no one-size-fits-all solution. I thought you needed IPsec, but if any encrypted connection will do then consider ssh.

From here, you should:

• learn about vpns
• figure out what you are trying to set up with your systems in terms that vpn admins use : "VPN connection which can hold either 'two' hosts" doesn't make any sense.
• use the simplest solution that will work for you

good luck.