I am trying to establish an IPSEC/GRE VPN between a Linux client and a Cisco 2811 router. Ideally, I need to be able to connect an Air Card into my laptop running Linux, and once assigned an IP address from the provider, access my hub network via VPN. My application uses multicasting, so GRE over IPSEC is required. My application is used in a public safety environment, so i would need this connection to be used in a hotel, mobile environment etc. The cisco router needs to be configured with a dynamic peer configuration. I need someone with extensive IPSEC/Linux expertise. I am looking for assistance with this configuration, and would be willing to pay a significant consulting fee for proper assitance

which part do you need to configure the router or your system
also is the router the vpn server
use this links its good and easy for the router config
http://articles.techrepublic.com.com...tag=rbxccnbtr1
http://articles.techrepublic.com.com...tag=rbxccnbtr1
what application in linux are you using for the vpn connection

"used in a public safety environment,"

I would do it but you should get your departments scheduled contractors to do it. Data loss might land you in jail.

Thank you for your response...i need help with the linux side, as I believe the cisco router is set up properly. I can get phase one working (isakmp) but phase 2 (IPSEC) does not seem to ever come up. I've disabled AH on the router and am trying to find someone who can disable and work with AH on the Linux client piece.

Hi Jefro,
I don't have an approved list of contractors for my department. No one in my area has the actual linux AND cisco expertise to help me with this problem. I am looking for someone to come on site and work with me to configure the system from the ground up. Do you know of anyone in the CT or NY area?

I'd send this up the chain of command. Your organization would have data policies, that might might go up to CFR or other public laws.

Who is this for? I understand if you can't say.

I might consider a nx/rdp or other tunnel to a home machine that runs within the secure lan/intranet.

GRE tunnels are not that secure.

ok dont use this links they should help you
http://www.linuxsecurity.com/resourc...wto/HOWTO.html
http://www.opus1.com/vpn/freeswan/IPSEC.CONF
http://linuxgazette.net/126/pfeiffer.html

also if thats givng you to much problems you can install wine and using the cisco vpn client

unfortunately the cisco easy vpn client does not support multicast and GRE. I've actually tried using this client, and contacted TAC directly who confirms that statement. Do you know if the onboard linux client can handle IPSEC and GRE and multicast?

http://www.linux.com/base/ldp/howto/...unnel.gre.html

I think it still might be better to use a nomachine in the lan and just nx to it from anywhere.

GRE tunnels are not secure.

They do have how to's on things like stunnel.

I have tried the above link and could not get MC traffic to pass etc. GRE tunnels are not secure? How else can I encapsulate multicast traffic for my application and routing protocol updates?