Re: [Ipsec-tools-users] VPN gateway using ipsec-tools?
Brought to you by:
mit_warlord,
netbsd
From: Matthew S. <ma...@ap...> - 2006-11-09 07:55:34
|
Christian Parpart wrote: > hi, > > a quick question on what I wasn't able to find an answer for using google, > unfortunately, is, wether it is possible to build a VPN gateway using > ipsec-tools and helpers... > > I found out, that some tools are using l2tpd/xl2tpd, a level 2 tunnel > protocol, which most probabely encapsulates the tunneled IP traffic into its > own thingy. however, I don't know much about, although, I'd like to build up > an IPsec-based vpn server on my root server (where ppl I want to may connect) > without the need of openswan/freeswan/ and alike. > > lartc.org is a still(!) little void on this topic :( > > So, I'd appreciate any kind of hints you can provide :) > > Best regards, > Christian Parpart. Ipsec-tools / kernel mode ipsec do support transport mode so I assume you could get them to work with windows XP hosts using shared secrets. At that point you would lay l2tp on top of the transport mode vpn. Any l2tp daemon should work, but then again windows might do something out of the standard or otherwise be picky. So to answer your question, yes, theoretically all of the pieces are available and the many how-to's about how to do it with openswan are generally applicable once the vpn is configured. HTH, schu |