search for: roadwarriors

...on this. In thinking about the topology that I am trying to set up, I will probably only set up a "private" DNS on the VPN for the 10.x.x.x users. With this in mind, I have now come up with a new question relating to this. What I will like to do is to give all of the uses, including roadwarriors, a static IP address on the 10.x.x.x address net and have a name in our VPN DNS associated with each one. This lead to the next problem. Is there a way that the TinC project can come up with a new variable possibly called "VPNDNS=" or something like that such that the roadwarriors hos...

Hello, i have got a problem with the configuration of an roadwarrior ipsec VPN tunnel with shorewall 2.2.3. I read the Shorewall Kernel 2.6 IPSEC and folowed the instructions to that point where to modify the hosts with the folowing parameters: vpn eth0:0.0.0.0/0 ipsec But i have got an entry like net eth0:0.0.0.0/0 even in the same file: If i

Hello All, I was just looking over how to set up the hosts files for Tinc and was wondering about how to handle Roadwarriors? It appears that the variable "Address=" must be set for individuals to connect to a host, right? Also, I am wondering about possibly using a private DNS+DHCP server combination that would allow the 10.x.x.x users to have their VPN ip resolved but this does not help regarding "...

Tom, After reading your latest postings, I am correct in understanding that, even with the netfilter-ipsec and policy patches in kernel 2.6, I still would not be able to connect more that one roadwarrior at a time? Mitch

Dear tinc community, I am using tinc in switch mode. I have three nodes. Two nodes reside on routers, vpn-eth is bridged with internal lan, each router has several machines connected to it's internal lan. Third node is the roadwarrior - "endpoint" linux PC. When the roadwarrior is off - everything works perfectly, machines on both sides can communicate without a problem in any

Hi again, which is the recommended procedure to get users (roadwarriors) with their windows laptops connected to the tinc daemon running on our firewall? What should we install on the laptop and how should we configure it? Thanks Andy Tinc: Discussion list about the tinc VPN daemon Archive: http://mail.nl.linux.org/lists/ Tinc site: http://tinc.nl.l...

I''ve successfully tested an IPSEC Roadwarrior configuration where both the gateway and the roadwarrior are runniing 2.6 with Racoon. The Shorewall IPSEC-2.6 documentation (http://shorewall.net/IPSEC.htm) has been updated to reflect my experimentation. Note that you can get the new ''ipsecvpn'' script from CVS until I release RC1 in the next day or so. -Tom -- Tom

...l certainly makes life easier. I''ve deployed Shorewall on both our Toronto and Ottawa office firewalls, and have configured a FreeS/WAN IPSEC VPN between them, and all works quite nicely. The next phase of the project involves granting access to both the Toronto and Ottawa networks to roadwarriors with IPSEC clients. This is where I''ve become a bit confused. I''m not really looking for specific help with my config settings, as I can likely figure those out myself. I just want to wrap my head around the logical configuration issues. I''ve read about Dynamic IP...

While I have concentrated on support for 2.6 native IPSEC in release 2.2.0, I am still of the opinion that unless you absolutely need IPSEC compatibility that OpenVPN is a much easier (and in the case of roadwarriors, a much better) solution. Having already generated all of the required X.509 certificates, it took me less than 1/2 hr to replace my IPSEC testbed with an OpenVPN one using the new tls-server and tls-client facility. That facility makes setting up a roadwarrior configuration a breeze. -Tom -- T...

Hello, is it possible to run tinc behind an unknown firewall(simple NAT) e.g. on windows clients to join an tinc network? These firewalls are not maintained by me and not possible to modify. Thanks for help Kai Tinc: Discussion list about the tinc VPN daemon Archive: http://mail.nl.linux.org/lists/ Tinc site: http://tinc.nl.linux.org/

Hi all, Somebody can explains me how can I configure ipsec-tools package to use private virtual ip address as an openswan does or some doc/howto about it?? I have seen this howto, but doesn't works for me: http://www.howtoforge.com/racoon_roadwarrior_vpn Many thanks. -- CL Martinez carlopmart {at} gmail {d0t} com

Hi list! I'm sure the topic has been discussed but I could not find what I was looking for. What would be the best / easiest VPN software solution. I would like to install vpn software on the * server for roadwarriors to connect to with laptops running windows. Ideally the vpn solution will not require any additional software on the client side but will use IPSEC. (Ofcourse call quality is important) There are numerous vpn server daemons around and I found many messages about some of them using tcp/udp etc a...

>From your post on Oct. 4, 2004 >As I announced earlier, I''m on vacation this week and we are spending >the week at our second home. Before I left, I simulated an IPSEC tunnel >between this house and our home in the Seattle area and I''m pleased to >announce that the real tunnel works flawlessly. > >So I believe that I have done all of the testing that I can

A number of you are flailing around trying to get the subject combination to work. You should all be aware that there are parts of this that don''t currently work and that won''t work well until there are enhancements made to Shorewall (and probably to Netfilter). I. There is no clean way currently to support Road Warriors from a Masquerading Netfilter firewall/gateway. As

Buf ... Solved. Problem was that /etc/pam.d/racoon doesn't exists (I found this tip on NetBSD ipsec pages). Simply I have copied /etc/pam.d/passwd to /etc/pam.d/racoon and now all works as expected. Many thanks for your help Ross. Ross S. W. Walker wrote: > > I think it might just use another one like /etc/pam.d/remote > cause I audited the package and it wasn't there.

Sorry Dag, it is possible to use linux as a roadwarrior client: http://www.fw-1.de/aerasec/ng/vpn-racoon/CP-VPN1-NG-Linux-racoon-roadwarrior.html -------- Original Message -------- Subject: Re: [CentOS] Connecting CentOS to IPSEC VPN (Checkpoint FW1) Date: Mon, 21 Aug 2006 15:20:55 +0200 From: carlopmart <carlopmart at gmail.com> To: CentOS mailing list <centos at centos.org>

Hi all, I am trying to establish a vpn tunnel between one CentOS5 IPSec server and a roadwarrior client, CentOS5 too. Roadwarrior use ipsec-tools version 0.6.5-8 (that comes with CentOS5) and server uses version 0.7 (downloaded from ipsec-tools website). My server configuration is: path include "/etc/racoon"; path certificate "/etc/racoon/certs"; path pre_shared_key

...redhat 8.0 Linux gateway machine. I have one working tunnel defined, all works well. I am not clear how to define mutiple concurrent tunnels. I can not add further interface entries as all the tunnels come in on ipsec0, do I still have mutiple zone definitions? some of the tunnels will be dynamic roadwarriors and as such would need a gateway entry in tunnels, which zone to I referrence? Any help greatly appreciated. Regards Roy

Is there a "cookbook" for setting this up? There are examples for setting up a tunnel between two fixed-address networks (e.g. a remote LAN that needs to be "integrated" with a central LAN over IPSec but I can't find anything addressing the other situation -- remote user(s) where the connecting IPs are not known in advance, such as a person with a laptop or smartphone in a

Dear Shorewall list, I need to connect a firewall to various remote sites (VPN''s) at the same time, but i do not have control of any of the remote subnets and/or the given IP address: The firewall is just a client in all of the VPN''s. So, as i see it, the remote subnets (mostly rfc1918) are doomed to get into conflict when they happen to be connected at the same time. For