Infrastructure:IPsec

Currently, vtluug has a strongSwan IPsec/L2TP server running on Acidburn. This server was configured using philpl's script hosted on Github

Contents

Administration

Setup

Setup mostly involves running the script, however there are options which can be configured afterwards. The script will prompt for a user, password, and Key on first run, and any subsequent runs will simply update the vpn.

It provides a startup script in /etc/init.d, which can be launched by systemd.

Adding users

Users can be added to /etc/ppp/chap-secrets, which should provide them with a password and username.

Use

Connecting

iPhone

The iPhone integrated VPN support will allow for connection to the VPN

Android

https://play.google.com/store/apps/details?id=org.strongswan.android

This app should allow for connections from android. The author of this article has not tested this.

Network Manager

netctl