[Openswan Users] Checkpoint VPN with Username / Password

[Paul Wouters]

On Wed, 20 Feb 2008, David Hayes wrote:

> I am having difficulty setting up a connection to our Checkpoint VPN.
> When using the official SecuRemote Windows client I use a username and
> password based authentication, and connect to a named Gateway. I am
> frankly at a bit of a loss as to how to configure OpenSWAN to connect
> using this method.

check the man page for ipsec.conf. You'll need these:

leftxauthclient=yes
rightxauthserver=yes

and perhaps:

leftmodecfgclient=yes
aggrmode=yes / ike=

For examples, see testing/pluto/xauth-pluto-*, particularly
testing/pluto/xauth-pluto-11

Paul