[Openswan Users] ipsec / l2tpd + iptables ?

[Paul Wouters]

On Tue, 28 Nov 2006, Reza ISSANY wrote:

> Here it is my ipsec verify command results :
>
> root at integration:~# ipsec verify
> Checking your system to see if IPsec got installed and started correctly:
> Version check and ipsec on-path                                 [OK]
> Linux Openswan U2.4.7/K2.6.18.3dedibox_r6_final (netkey)
> Checking for IPsec support in kernel                            [OK]
> NETKEY detected, testing for disabled ICMP send_redirects       [OK]
> NETKEY detected, testing for disabled ICMP accept_redirects     [OK]
> Checking for RSA private key (/etc/ipsec.secrets)               [DISABLED]
>  ipsec showhostkey: no default key in "/etc/ipsec.secrets"
> Checking that pluto is running                                  [OK]
> Checking for 'ip' command                                       [OK]
> Checking for 'iptables' command                                 [OK]
> Opportunistic Encryption Support                                [DISABLED]
>
> Any idea to activate Internet on vpn l2tpd clients ?

That looks good. Do the checks I asked you to do before:

> > check
> > for firewall rules, check for NAT, and check if the gateway can reach the
> > internet
> > on its "l2tp pool" IP address using 'ping -I sourceip www.google.com'
> >

Paul
-- 
Building and integrating Virtual Private Networks with Openswan:
http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155