IPSEC / VPN - Howto for newbies

[Roger Grosswiler]

Hi,

i would like to connect via wirless to my homenetwork, using secured 
connections. i am currently setting up radius for 802.ix and would 
afterwards transmitting data through a secured channel.

For this i would like to learn more about IPSEC in special and VPN. I 
have seen, IPSEC is implemented in FC3 using system-config-network, but 
i cannot be that easy, or?

Do you have any hint, howto or manual?

Thx,
Roger

[Leonard Isham]

On Mon, 06 Dec 2004 14:56:32 +0100, Roger Grosswiler <roger(a)gwch.net&gt; wrote:
>  Hi,
>  
>  i would like to connect via wirless to my homenetwork, using secured
>  connections. i am currently setting up radius for 802.ix and would
>  afterwards transmitting data through a secured channel.
>  
>  For this i would like to learn more about IPSEC in special and VPN. I
>  have seen, IPSEC is implemented in FC3 using system-config-network, but
>  i cannot be that easy, or?
>  
>  Do you have any hint, howto or manual? 
Consider OpenVPN http://openvpn.sourceforge.net.

-- 
Leonard Isham, CISSP 
Ostendo non ostento.

[Alex F. Evonosky]

Leonard Isham wrote:

>  
>  
>  Consider OpenVPN http://openvpn.sourceforge.net.
>   
yes, the openVPN is very solid.  We use it in production enviroments 
with no issues.  I must say, we migrated off freeSWAN onto openVPN, and 
this software really is good.

[Roger Grosswiler]

Alex Evonosky wrote:
>  Leonard Isham wrote:
>  
> >
> >
> > Consider OpenVPN http://openvpn.sourceforge.net.
> >
>  
>  yes, the openVPN is very solid.  We use it in production enviroments 
>  with no issues.  I must say, we migrated off freeSWAN onto openVPN, and 
>  this software really is good.
>  
>   
ok, but how about the implemented ipsec-solution under fc3? is this not 
usable?

Roger

[Leonard Isham]

On Mon, 06 Dec 2004 22:31:12 +0100, Roger Grosswiler <roger(a)gwch.net&gt; wrote:
>  Alex Evonosky wrote:
>  
>  
>  > Leonard Isham wrote:
>  >
>  >>
>  >>
>  >> Consider OpenVPN http://openvpn.sourceforge.net.
>  >>
>  >
>  > yes, the openVPN is very solid.  We use it in production enviroments
>  > with no issues.  I must say, we migrated off freeSWAN onto openVPN, and
>  > this software really is good.
>  >
>  > 
>  ok, but how about the implemented ipsec-solution under fc3? is this not
>  usable?
>   
Possible, but not easy.  For one thing you'll need a new kernel. 
FreeSWAN has stopped development, byt two others have arisen from it's
ashes StrongSWAN and OpenSWAN.

Some googling should get you the answers you need.


-- 
Leonard Isham, CISSP 
Ostendo non ostento.

IPSEC / VPN - Feature Request for FC4

[Roger Grosswiler]

Leonard Isham schrieb:
>  On Mon, 06 Dec 2004 22:31:12 +0100, Roger Grosswiler
> <roger(a)gwch.net&gt; wrote:
>  
> >Alex Evonosky wrote:
> >
> >
> >
> >>Leonard Isham wrote:
> >>
> >>
> >>>
> >>>Consider OpenVPN http://openvpn.sourceforge.net.
> >>>
> >>
> >>yes, the openVPN is very solid.  We use it in production enviroments
> >>with no issues.  I must say, we migrated off freeSWAN onto openVPN, and
> >>this software really is good.
> >>
> >>
> >
> >ok, but how about the implemented ipsec-solution under fc3? is this not
> >usable?
> >
>  
>  
>  Possible, but not easy.  For one thing you'll need a new kernel. 
>  FreeSWAN has stopped development, byt two others have arisen from it's
>  ashes StrongSWAN and OpenSWAN.
>  
>  Some googling should get you the answers you need.
>  
>   
Hi guys,

was looking for openvpn, which is really a good thing. why not making 
life easier for newbies like me and put openvpn in FC4?

I was looking for IPSEC too but was stopping then as i have to implement 
a SIMPLE solution for linux & windoze..

Roger

IPSEC / VPN - Feature Request for FC4

[Rahul Sundaram]

Hi


>  was looking for openvpn, which is really a good thing. why not
> making
>  life easier for newbies like me and put openvpn in FC4?
>  
>  I was looking for IPSEC too but was stopping then as i have to implement
>  a SIMPLE solution for linux & windoze..
>   
file a RFE in bugzilla.redhat.com

-- 
Regards,
Rahul Sundaram

IPSEC / VPN - Feature Request for FC4

[Roger Grosswiler]

Rahul Sundaram schrieb:
>  Hi
>  
>  
>  
> >was looking for openvpn, which is really a good thing. why not making
> >life easier for newbies like me and put openvpn in FC4?
> >
> >I was looking for IPSEC too but was stopping then as i have to implement
> >a SIMPLE solution for linux & windoze..
> >
>  
>  
>  file a RFE in bugzilla.redhat.com
>   
Hi Rahul,

My first insert in bugzilla: how do i do this best? I stuck on component 
and didn't find anything like "new request" or whatever?

IPSEC / VPN - Feature Request for FC4

[Roger Grosswiler]

Roger Grosswiler schrieb:
>  Rahul Sundaram schrieb:
>  
> > Hi
> >
> >
> >
> >> was looking for openvpn, which is really a good thing. why not making
> >> life easier for newbies like me and put openvpn in FC4?
> >>
> >> I was looking for IPSEC too but was stopping then as i have to implement
> >> a SIMPLE solution for linux & windoze..
> >>
> >
> >
> > file a RFE in bugzilla.redhat.com
> >
>  Hi Rahul,
>   
>   
ok...something like this?

https://bugzilla.redhat.com/bugzilla/show_bug.cgi?id=142798

Roger

IPSEC / VPN - Feature Request for FC4

[Satish Balay]

On Tue, 14 Dec 2004, Roger Grosswiler wrote:

>  > > > was looking for openvpn, which is really a good thing.
> why not making
>  > > > life easier for newbies like me and put openvpn in FC4? 
BTW: openvpn appears to be packaged by 'dag' for fc3 - so you could
use it now..

http://dag.wieers.com/packages/openvpn/openvpn-1.6.0-1.1.fc3.rf.i386.rpm

Satish

IPSEC / VPN - Feature Request for FC4

[Roger Grosswiler]

Am Dienstag, den 14.12.2004, 09:07 -0600 schrieb Satish Balay:
>  On Tue, 14 Dec 2004, Roger Grosswiler wrote:
>  
>  > > > > was looking for openvpn, which is really a good thing. why not
> making
>  > > > > life easier for newbies like me and put openvpn in FC4?
>  
>  BTW: openvpn appears to be packaged by 'dag' for fc3 - so you could
>  use it now..
>  
>  http://dag.wieers.com/packages/openvpn/openvpn-1.6.0-1.1.fc3.rf.i386.rpm
>  
>  Satish
>   
in fact, it is! but why not having this excellent tool within the usual
distro?

Roger

IPSEC / VPN - Feature Request for FC4

[Satish Balay]

On Tue, 14 Dec 2004, Roger Grosswiler wrote:

>  in fact, it is! but why not having this excellent tool within the
> usual
>  distro? 
The term 'distribution' is soon going to be a sematic issue - esp with
the upcoming 'fedora extras'. (and different folks having different
ideas of migrating packages between 'core' and 'extras')

So with fedora, in a way - you need to be able to understand & work
with multiple compatible repositories. (yum helps a bit with that)

Satish