[Openswan Users] Basic Openswan VPN questions

Chris Bartram chrisb at 3k.com
Thu Jun 22 10:52:28 CEST 2006


Pardon the newbie-like stuff;

I have a private network (class C) with a local Win2003 domain controller
and all machines logon/validate via the DC using our windows domain.

I have a dual-homed Linux FC4 box which has a fixed IP Internet-accessible
interface, as well as a separate NIC with a fixed IP on the private network.

I need to be able to access the private network from various locations on
the Internet (not always from my private machines; so I prefer to use a
shared-key vs. dealing with certificates). I also prefer/hope to not have to
install anything custom on the machine(s) I might use to access my network
(i.e. standard Windows2000/XP VPN connection if at all possible). In the
past I did this via a Win2000 DC secured with Zonealarm; properly securing a
Win2003 DC *and* getting VPN working through it seemed to be conflicting
goals, so I looked around and found Openswan. I'm more inclined to trust a
Linux box with a direct 'net link than a Windows machine anyway...

I just downloaded and installed Openswan on the FC4 box, though have not
configured it yet. 

Given that authentication will be by the Win2k3 DC logon, what do I really
need to configure on the FC4 box to get a VPN working? Is there a sample
config (or can someone suggest one) for this scenario? I'm looking for
reasonable security, not necessarily DOD quality; and there will likely only
be one or two other users (max) besides myself using the VPN. :-)

Thanks much,
 -Chris Bartram



More information about the Users mailing list