How to set up ethernet ipsec connection?

kornerr · 02-10-2006, 10:07 AM

I have 2.4.32, RealTek RTL8139C.
I've built RealTek into the kernel.
What should I do next?

Thanks.

Yalla-One · 02-10-2006, 10:12 AM

I suggest visiting http://www.ipsec-howto.org/ once you have got basic networking up and running on the system.

-Y1

kornerr · 02-11-2006, 11:42 AM

Ok, after reading that howto here's what I have.

/etc/psk.txt

Quote:

10.104.4.61(=my_ip) my_password

/etc/resolv.conf

Quote:

search example.net
nameserver 80.89.159.33
nameserver 81.1.221.62

/etc/racoon.conf

Quote:

path pre_shared_key "/etc/psk.txt";

remote 10.104.4.61 {
exchange_mode main,aggressive;
proposal {
encryption_algorithm 3des;
hash_algorithm sha1;
authentication_method pre_shared_key;
dh_group 2;
}
}

sainfo anonymous {
pfs_group 2;
encryption_algorithm 3des;
authentication_algorithm hmac_md5;
compression_algorithm deflate;
}

/etc/setkey.conf

Quote:

#!/usr/sbin/setkey -f

flush;
spdflush;

spdadd 10.104.4.61/32 10.104.4.1/32 any -P out ipsec
esp/tunnel/10.104.4.61-10.104.4.1/require;
spdadd 10.104.4.1/32 10.104.4.61/32 any -P in ipsec
esp/tunnel/10.104.4.1-10.104.4.61/require;

spdadd 10.104.4.61/32 10.104.4.0/24 any -P out none;
spdadd 10.104.4.0/24 10.104.4.61/32 any -P in none;

spdadd 10.104.4.61/32 0.0.0.0/0 any -P out ipsec
esp/tunnel/10.104.4.61-10.104.4.1/require;
spdadd 0.0.0.0/0 10.104.4.61/32 any -P in ipsec
esp/tunnel/10.104.4.1-10.104.4.61/require;

Then I've run "netconfig", have provided correct values.
Then I've run "racoon -f /etc/racoon.conf", this process now sleeps (Ss).
After all this I have no access to internet.
What should I do next?

Thanks.