LinuxQuestions.org
Go Job Hunting at the LQ Job Marketplace
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices

Reply
 
Search this Thread
Old 01-15-2007, 06:53 PM   #1
jantman
Member
 
Registered: Nov 2005
Location: New Jersey, USA
Distribution: SuSE
Posts: 492

Rep: Reputation: 31
IPsec VPN - Dynamic Server IP, NAT, etc.


I have a substantial Linux network at home. I'm currently in a dorm at college and want to connect to my home network using an IPsec VPN. I have no experience with VPNs, but have read all of the tutorials and docs I could find.

The setup is as follows:

My server (Netgear FVS318, or m0n0wall, or a SuSE box if need be) is on a fiber Internet connection with a dynamic IP. I have dynamic DNS setup through dyndns.org. My client is a desktop at school that is behind a NAT firewall and has no dedicated Internet IP.

Is there any way to still use OpenSWAN on the client? I looked through the docs, but the "left" and "right" parameters call for IP addresses. The server doesn't have a static IP, and the client doesn't have an IP that can be seen by anyone off the LAN.

Any ideas?

Thanks,
Jason
 
Old 01-15-2007, 08:44 PM   #2
Micro420
Senior Member
 
Registered: Aug 2003
Location: Berkeley, CA
Distribution: Mac OS X Leopard 10.6.2, Windows 2003 Server/Vista/7/XP/2000/NT/98, Ubuntux64, CentOS4.8/5.4
Posts: 2,986

Rep: Reputation: 45
I am not familiar with OpenSWAN, but have you looked at using OpenVPN or SSH tunneling?

To find your home IP address, you could ping the dynamic dns. To find your ip address at the college, you could go to whatismyip.com

I use OpenVPN, and even though I'm behind a NAT, I am still able to VPN into my remote network. As long as I have my destination IP address, I can get in. If for reason OpenSWAN requires your source IP address BEHIND the NAT, then you have to talk to the admin and have him/her forward ports. I doubt this is the case, though.

Last edited by Micro420; 01-15-2007 at 08:48 PM.
 
Old 01-15-2007, 09:30 PM   #3
jantman
Member
 
Registered: Nov 2005
Location: New Jersey, USA
Distribution: SuSE
Posts: 492

Original Poster
Rep: Reputation: 31
SSH tunneling won't work through NAT. I haven't looked into OpenVPN.

Forwarding ports through the University's NAT isn't an option.

I understand the part about the Internet IP with whatismyip.com. I was just assuming that it needed some IP to the client machine - assuming it will work with NAT, that's OK.

As to getting the IP of my DynamicDNS... that defeats the purpose of the dynamic DNS. The IP lease is for about 26 hours. This means that I'd need to re-edit my IPsec cilent configuration every day. Is there any way to do a one-time configuration and have it *work*?
 
Old 01-16-2007, 01:11 AM   #4
Micro420
Senior Member
 
Registered: Aug 2003
Location: Berkeley, CA
Distribution: Mac OS X Leopard 10.6.2, Windows 2003 Server/Vista/7/XP/2000/NT/98, Ubuntux64, CentOS4.8/5.4
Posts: 2,986

Rep: Reputation: 45
If you use OpenVPN then you can just put your dynamic dns name into the OpenVPN configuration file. you don't have to use an IP address with OpenVPN. Other than that, I cannot help you unless it relates to OpenVPN as I am not familiar with OpenSWAN or other VPN tools in Linux, maybe besides PPTP, but that is to connect to a Windows machine.
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Running IPSEC vpn server ? winxandlinx Linux - Security 1 10-11-2006 06:41 AM
multiple ipsec vpn clients behind nat egarnel Linux - Networking 1 12-30-2005 06:18 PM
IPSEC/L2TP VPN Server on Fedora Core 3 using Kernel 2.6 petwalrus Linux - Networking 3 04-21-2005 11:55 AM
Can I be a VPN server if my IP is dynamic? Avatar Linux - Networking 3 06-22-2004 12:42 PM
linux nat windows xp vpn server saburo62 Linux - Networking 3 05-21-2004 04:03 PM


All times are GMT -5. The time now is 06:41 PM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration