setting up vpn client on a freebsd workstation

Vaida Bogdan vaida.bogdan at gmail.com
Thu Jan 26 06:05:36 PST 2006


My certificates are self-signed and they were signed by the same CA as
the server's.

What I did on the client:

ifconfig gif0 create
ifconfig gif0 tunnel aaa.aaa.aaa.aaa ccc.ccc.ccc.ccc
ifconfig gif0 inet xxx.xxx.xxx.xxx 192.168.1.1
What do I need to replace xxx.xxx.xxx.xxx with and how do I test it
works until this step?

External Interface         External Interface (behind nat)
ccc.ccc.ccc.ccc             10.100.100.2
     |                                               |
--> VPN <--> Internet <--> FreeBSD Client (NATed extip: ddd.ddd.ddd.ddd)
      |
FW-1 Protected Net
192.168.1.0/24

On 1/25/06, Fernando Gleiser <fgleiser at cactus.fi.uba.ar> wrote:
> On Mon, 23 Jan 2006, Vaida Bogdan wrote:
>
> > I don't need openvpn, I need IPSEC (KAME). So none of the proposed
> > solutions work.
> >
> > I am the "FreeBSD Client" in the configuration so I can't change the
> > server vpn implementation.
> >
>
> Some basic questions: are your certificates self-signed? are your
> certificates and the linux ones signed by the same CA? you need to send
> your certificate and your CA's certificate to the linux admin so s?he
> can install them in the linux box.
>
> For the local config, look here:
>
> http://ezine.daemonnews.org/200502/ipsec.html
>
>
> Hope this helps
>
>
>                 Fer
>


More information about the freebsd-security mailing list