LinuxQuestions.org
Visit Jeremy's Blog.
Go Back   LinuxQuestions.org > Forums > Linux Forums > Linux - Networking
User Name
Password
Linux - Networking This forum is for any issue related to networks or networking.
Routing, network cards, OSI, etc. Anything is fair game.

Notices

Reply
 
Search this Thread
Old 09-13-2005, 06:03 PM   #1
Freddde
LQ Newbie
 
Registered: Sep 2005
Posts: 1

Rep: Reputation: 0
Need IPCop to IpCop VPN assistance


Hi,

I have a problem getting an IPCop-to-IPCop VPN up and running. (2 x 1.4.6)
I suspect the problem is the RIGHT side of the VPN, as the IPCop (next hop) GW has a NAT address.

Can anyone please confirm that it IS possible to make a VPN running under these circumstances?

Please assist anyone!

Cheers,
Glenn







1) the left subnet and mask, (192.168.39.0/24)
2) the left interface address (real internet /30 subnet)
3) the left default gateway (real internet /30 subnet)
3b) Public IP on Left side
4) Internet transport
5) Public IP on Right side
5b) the right default gateway (a NAT address: 192.168.1.1)
6) the right interface address (192.168.1.20)
7) the right subnet and mask. (192.168.31.0/24)



.LEFT (Glenn)...............................................................RIGHT (Per)

..1............2...3.......3b.........4..........5.................5b...6.................7
..|...+------+...+------+...................+-------+-----+....+-------+.....|
..|...|.VPN..|...|.Gate...|...insecure.....|.Gate...|NAT.|.....|.VPN.....|.....|
..|--|.IP....|---|.way....|--- public.--- |.way...|.......|----|.IP......|---|
..|...|.Cop..|...|(ISP)....|...net-work....|.(ISP)..|.......|.....|.Cop....|....|
..|...+------+...+------+ ...................+------+-----+....+-------+....|
..|.............................................................................................|


The RIGHT ISP GW with NAT is set to forward all ports to the RED interface (6) address of the IPCop.
(I can currently SSH from left LAN to the RIGHT IPCop and vice verca)

==================================================
/var/ipcop/vpn/ipsec.conf on the LEFT IPCop:

conn GlennPer
left=81.186.22.191
leftnexthop=%defaultroute
leftsubnet=192.168.39.0/24
right=84.48.136.24
rightsubnet=192.168.31.0/24
rightnexthop=%defaultroute
dpddelay=30
dpdtimeout=120
dpdaction=hold
authby=secret
auto=start

==================================================

/var/ipcop/vpn/ipsec.conf on the RIGHT IPCop:

conn PerGlenn
right=192.168.1.20 (IS THIS THE PROBLEM (NO OFFICIAL IP??)
rightsubnet=192.168.31.0/24
rightnexthop=%defaultroute
left=81.186.22.191
leftsubnet=192.168.39.0/24
leftnexthop=%defaultroute
dpddelay=30
dpdtimeout=120
dpdaction=hold
authby=secret
auto=start

Last edited by Freddde; 09-13-2005 at 06:24 PM.
 
Old 09-15-2005, 02:28 PM   #2
issinho
Member
 
Registered: Jun 2005
Location: Bosie, ID
Distribution: Fedora Core 4, Kurumin,BackTrack, Slackware 10.2, IPCop
Posts: 105

Rep: Reputation: 15
You're gonna hate me, but...

check out the IPCop documentation:

http://www.ipcop.org/modules.php?op=...pDocumentation
 
  


Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is Off
HTML code is Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
IPCop Users - need VPN settings file slackhack Linux - General 2 08-18-2005 06:31 PM
IPCop VPN PortForwarding Trouble delta-2 Linux - Security 0 04-06-2005 05:42 AM
IPCop SinnaminGrrl Linux - Newbie 1 12-19-2004 05:40 PM
IPCop to IPCop VPN... furrie Linux - Networking 1 11-04-2003 12:40 PM
IPCOP VPN Troubles Big Brad Linux - Newbie 2 10-18-2003 11:02 PM


All times are GMT -5. The time now is 02:07 AM.

Main Menu
My LQ
Write for LQ
LinuxQuestions.org is looking for people interested in writing Editorials, Articles, Reviews, and more. If you'd like to contribute content, let us know.
Main Menu
Syndicate
RSS1  Latest Threads
RSS1  LQ News
Twitter: @linuxquestions
identi.ca: @linuxquestions
Facebook: linuxquestions Google+: linuxquestions
Open Source Consulting | Domain Registration