strongswan configuration hint

cgallucci · 02-08-2013, 03:13 AM

Hi all.
I'm in trouble trying to configura a server vpn+ipsec+ike.
whe need to set a vpn from an external server(A) vpn and my server(B).
I'm a bit new about this.

Server A conf send mi this part of configuration:
VPN peer XX.XX.XX.XXX
Private network (source IP Network) 10.21.129.1/32
12.21.129.129/32

On my site i really don't not whitch value to choose for private network.

Someone could please give me a hint.
I'm setting on my linux box a strongSwan ipsec server.

THanks in advance

carmelo

Skaperen · 02-08-2013, 11:02 PM

Could you give a detailed description of the whole network topology? If you want to keep your IP addresses secret, just make up something. Use true private IPs where private IPs are. Make up real IPs where real IPs are (using examples from RFC 5737 or just pick them out of the ham radio zone in 44.X.X.X).

Skaperen · 02-08-2013, 11:17 PM

For your private networks that are not internet accessed, the address ranges generally used are:

1. 10.0.0.0 - 10.255.255.255 usually broken down in /16 or /24 subnets
2. 172.16.0.0 - 172.31.255.255 usually broken down in /16 or /24 subnets
3. 192.168.0.0 - 192.168.255.255 usually broken down in /24 subnets
4. (for IPv6) fc00:: - fdff:ffff:ffff:ffff:ffff:ffff:ffff:ffff usually broken down in /16 or /64 subnets

See RFC 1918 and RFC 4193.

cgallucci · 02-09-2013, 03:06 AM

Thank's or hint. I solved my problem reading some documentation. Great to all.

carmelo