[Openswan Users] SonicNET Sample Configuration with Certificate Authentication?

[Trevor Benson]

Are you referring to a Sonic.net connection like through one of their
wireless hotspots?  If so let me know, I have one of their hotspots, and
use Openswan for my VPN services.  I could probably do some testing.  If
this is the case, Sonic.net uses a Cisco VPN Concentrator, and cisco
provides ipsec clients for linux as well. I will test out my openswan
across my hotspot, and see what I get.

Trevor

> -----Original Message-----
> From: users-bounces at lists.openswan.org [mailto:users-
> bounces at lists.openswan.org] On Behalf Of Adam Kessel
> Sent: Wednesday, June 09, 2004 3:28 PM
> To: users at lists.openswan.org
> Subject: [Openswan Users] SonicNET Sample Configuration with
Certificate
> Authentication?
> 
> Can anyone confirm that Openswan (version 2.1.1-4 from Debian with
kernel
> 2.6.7rc3) will work with a SonicNET VPN with certificate based
> authentication?  Sonic suggested we use OpenVPN, which doesn't even
> appear to be an IPSec client.
> 
> I've been having a lot of trouble finding up-to-date documentation for
my
> set-up--many broken links, and old sample configurations for
FreeS/WAN.
> 
> I think I have a fairly standard set-up.  Both my home (cable modem)
and
> my work network use NAT.   The SA is "GroupVPN," IPSec Keying Mode is
> "IKE Using 3rd Party Certificates," Phase 1 Encryption/Authentication
is
> 3DES & SHA1; Phase 2 is ESP 3DES HMAC SHA1, XAUTH is required, and
> Perfect Forward Secrecy is enabled.
> 
> Does anyone have a sample configuration that should work with this
> set-up?
> 
> Thanks for any pointers.
> --
> Adam Kessel
> http://adam.rosi-kessel.org
> _______________________________________________
> Users mailing list
> Users at lists.openswan.org
> http://lists.openswan.org/mailman/listinfo/users