[Openswan Users] Transport mode on a home LAN

[Gaiseric Vandal]

Doesn't linux support IPSec transport natively?  If all machines are on your
home LAN, then you should not need to use OpenSWAN (a VPN solution) for
this.  The shared secret  approach should be sufficient.

No, I have not actually done this myself with Linux-  I have with Window
200x machines but I think the "design" principle applies.



-----Original Message-----
From: users-bounces at openswan.org [mailto:users-bounces at openswan.org] On
Behalf Of Jack Byer
Sent: Saturday, November 20, 2010 11:34 AM
To: users at openswan.org
Subject: [Openswan Users] Transport mode on a home LAN

I have a home LAN with three machines: hydrogen (router), carbon (file
server) and boron (main desktop). I'd like to force these machines to
encrypt all traffic on the local network (192.168.1.0/24 and
2001:1938:155::/64). What is the best way to accomplish this? I tried
setting up connections based on the linux-to-linux example but was
unable to make this work. Should I use certificates instead or set up
a local DNS server and put the keys in TXT records to use OE?
_______________________________________________
Users at openswan.org
http://lists.openswan.org/mailman/listinfo/users
Micropayments: https://flattr.com/thing/38387/IPsec-for-Linux-made-easy
Building and Integrating Virtual Private Networks with Openswan: 
http://www.amazon.com/gp/product/1904811256/104-3099591-2946327?n=283155