Difference between revisions of "Infrastructure:IPsec"

From the Linux and Unix Users Group at Virginia Teck Wiki
Jump to: navigation, search
imported>Echarlie
(Setup)
imported>Pew
 
(10 intermediate revisions by 2 users not shown)
Line 13: Line 13:
  
 
=== Adding users ===
 
=== Adding users ===
 +
 +
Users can be added to /etc/ppp/chap-secrets, which ''should'' provide them with a password and username.
  
 
== Use ==
 
== Use ==
Line 18: Line 20:
  
 
==== iPhone ====
 
==== iPhone ====
 +
 +
The iPhone integrated VPN support will allow for connection to the VPN
 +
<!-- add screenshots -->
  
 
==== Android ====
 
==== Android ====
 +
 +
https://play.google.com/store/apps/details?id=org.strongswan.android
 +
 +
This app should allow for connections from android. The author of this article has not tested this.
  
 
==== Network Manager ====
 
==== Network Manager ====
Line 26: Line 35:
  
  
[[Category:Services]]
+
== References==
 +
 
 +
[[Category:VTLUUG:Projects]]
 +
[[Category:Infrastructure]]
 +
[[Category:Needs restoration]]

Latest revision as of 06:30, 4 January 2018

Currently, vtluug has a strongSwan IPsec/L2TP server running on Acidburn. This server was configured using philpl's script hosted on Github

Administration

Setup

Setup mostly involves running the script[1], however there are options which can be configured afterwards. The script will prompt for a user, password, and Key on first run, and any subsequent runs will simply update the vpn.

It provides a startup script in /etc/init.d, which can be launched by systemd.

Adding users

Users can be added to /etc/ppp/chap-secrets, which should provide them with a password and username.

Use

Connecting

iPhone

The iPhone integrated VPN support will allow for connection to the VPN

Android

https://play.google.com/store/apps/details?id=org.strongswan.android

This app should allow for connections from android. The author of this article has not tested this.

Network Manager

netctl

References