IN the following example I will asume that left=local and right=remote. This is just a convention, it need nt bee this way....<br>This is the config for the home openswan.<br><br>conn here-there<br> right=<a href="http://office.dnsalias.org">
office.dnsalias.org</a><br> rightid=@<a href="http://office.dnsalias.org">office.dnsalias.org</a><br> left=%defaultroute<br> leftid=@<a href="http://home.dnsalias.org">home.dnsalias.org</a><br> authby=secret<br>
auto=start<br> ### THE FOLLOWING LINES ARE OPTIONAL the defualt values are already predefinied as such.<br> keyexchange=ike<br> esp=aes,3des<br> keyingtries=5<br> rekeymargin=4m<br> auth=esp<br> pfs=yes
<br> <br>Here is the config for the office openswan....<br><br>conn here-there<br>
right=<a href="http://office.dnsalias.org">office.dnsalias.org</a><br>
rightid=@<a href="http://home.dnsalias.org">home.dnsalias.org</a><br>
left=%defaultroute<br>
leftid=@<a href="http://office.dnsalias.org">office.dnsalias.org</a><br>
authby=secret<br>
auto=start<br>
### THE FOLLOWING LINES ARE OPTIONAL the defualt values are already predefinied as such.<br>
keyexchange=ike<br>
esp=aes,3des<br>
keyingtries=5<br>
rekeymargin=4m<br>
auth=esp<br>
pfs=yes<br><br><br>the ipse.csecrets file for home....<br><a href="http://office.dnsalias.com">office.dnsalias.com</a> <a href="http://home.dnsalias.com">home.dnsalias.com</a>: PSK "password"<br><br>This should get you up and running..... BTW, is there any reason you are not using rsasig type authentication? It way more secure. If you require help with that I'm sure a quick dive in the the man page for
ipsec.conf could help with that.<br><br>Best Regards,<br><br>Patrick Ford<br><br><br>the ipsec.secrets file for the office......<br><a href="http://home.dnsalias.com">home.dnsalias.com</a> <a href="http://office.dnsalias.com">
office.dnsalias.com</a>: PSK "password"<br><br>
<br>
<br>
<br><br><br><div><span class="gmail_quote">On 16/01/07, <b class="gmail_sendername">Deepak Chopra</b> <<a href="mailto:deepak.chopra@mind-infotech.com">deepak.chopra@mind-infotech.com</a>> wrote:</span><blockquote class="gmail_quote" style="border-left: 1px solid rgb(204, 204, 204); margin: 0pt 0pt 0pt 0.8ex; padding-left: 1ex;">
Dear ALL,<br><br>I've a problem in setting up a VPN connections between my Home Network to my<br>OfficeNetwork,<br>Where 3 machines are connected to my home network and the same number of<br>machines are installed in my office.
<br>I want to make a VPN connection on both gateways with FreeSWan using Dynamic<br>IP Addresses.<br><br> <a href="http://192.168.1.2">192.168.1.2</a> (eth0) <a href="http://192.168.1.1">192.168.1.1
</a><br><a href="http://192.168.1.1">192.168.1.1</a> 192.168.1.2(eth0)<br> | | | | | | [ ]<br>| | | | | |<br>---|------->----|----Gateway Linux---|===>|-DSL Router-|------[ INTERNET
<br>]---|-DSL ROUTER-|-----|--Linux--|--<---|----<br> | | | | | | | [ ]<br>| | | | |<br><a href="http://17.29.18.0/24">17.29.18.0/24</a>
<a href="http://172.29.18.1">172.29.18.1</a> (eth1) |<br>| | <a href="http://192.168.10.0/24">192.168.10.0/24</a><br>HomeNetwork <a href="http://abc.dnsalias.net">
abc.dnsalias.net</a><br><a href="http://xyz.dnsalias.net">xyz.dnsalias.net</a> | OfficeNet<br><br>|<br><br><a href="http://192.168.10.1">192.168.10.1</a> (eth1)<br><br>In the above mentioned Scenario, I've two DSL Routers with same
<br>configuration. Both are taking Dynamic IP address from the ISP and on both<br>the DSL Routers I've configured the DynDNS.org user accounts (<br><a href="http://abc.dnsalias.net">abc.dnsalias.net</a> and <a href="http://xyz.dnsalias.net">
xyz.dnsalias.net</a>) and these DSL routers are directly<br>connected to the Linux (RedHat9) GateWay Machines on eth0 interface. Now I<br>want to make a VPN Tunnel between my HomeNet and OfficeNet.<br><br>Kindly suggest me how it is possible. And I'm also sending you the
<br>ipsec.conf and ipsec.secrets along with this.<br><br>I'd be highly thankful to you if I'm able to connect my home network machine<br>to my office network.<br><br><br>Deepak Chopra<br><br><br><br>The information contained in this electronic message and any attachments to this message are intended for the exclusive use of the addressee(s) and may contain proprietary, confidential or privileged information. If you are not the intended recipient, you should not disseminate, distribute or copy this e-mail. Please notify the sender immediately and destroy all copies of this message and any attachments.
<br><br>WARNING: Computer viruses can be transmitted via email. The recipient should check this email and any attachments for the presence of viruses. The company accepts no liability for any damage caused by any virus/trojan/worms/malicious code transmitted by this email.
<br><br><a href="http://www.mind-infotech.com">www.mind-infotech.com</a><br><br><br><br>_______________________________________________<br><a href="mailto:Users@openswan.org">Users@openswan.org</a><br><a href="http://lists.openswan.org/mailman/listinfo/users">
http://lists.openswan.org/mailman/listinfo/users</a><br>Building and Integrating Virtual Private Networks with Openswan:<br><a href="http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155">http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155
</a><br><br><br><br></blockquote></div><br><br clear="all"><br>-- <br><br>"Education is what remains after one has forgotten what one has learned in school."<br> Albert Einstein