It's working THANKS THANKS.....Installing FreeS/Wan Redhat 7.3

  1.) Download the RPM's  

  ftp://ftp.xs4all.nl/pub/crypto/freeswan/RedHat-RPMs

  2.) Intstall the RPM's
      a.)FreeS/Wan Module 
        b.)FreeS/Wan

  3.)  

echo 1 > /proc/sys/net/ipv4/ip_forward
iptables -t nat -A POSTROUTING -o eth0  -j MASQUERADE
iptables -A FORWARD  -j ACCEPT


iptables -I INPUT -i eth0 -p udp  --sport 67  --dport 68 -j ACCEPT
iptables -I INPUT -i eth0 -p tcp  --sport 1024: --dport 1723 -j ACCEPT
iptables -I INPUT -i eth0 -p udp  --sport 500   --dport 500 -j ACCEPT
iptables -I INPUT -i eth0 -p udp                --dport 5050 -j ACCEPT
iptables -I INPUT -i eth0 -p ah   -j ACCEPT
iptables -I INPUT -i eth0 -p esp   -j ACCEPT
iptables -I INPUT -i eth0 -p 47    -j ACCEPT
iptables -P INPUT DROP



config setup

        interfaces="%defaultroute" or "ipsec0=eth0" or "ipsec0=ppp0" 
        klipsdebug=none
        plutodebug=none
        plutoload=%search
        plutostart=%search
        uniqueids=yes


conn %default

        keyingtries=1
        authby=secret


conn tunnel-one

        type=tunnel
        left=192.168.0.45 or "%defaultroute" ---> ( my eth0 interface)
        leftnexthop=
        leftsubnet=10.1.1.0/255.255.255.0 --> (this is my eth1 segment)
        right= %any ---> (this is my windows 2000 pro box, with SSH Sentinel)
        keyexchange =ike
        ikelifetime= 240m
        pfs = yes
        keylife = 1h
        #rightsubnet = /255.255.255.0
        rightnexthop =
        compress = no
        auto = add

------------------------------------------


Here is my ipsec.secrets config


192.168.0.45 %any: PSK "junk"


It's work great with SSH Sentinel
 
   



_______________________________________________
Redhat-list mailing list
[EMAIL PROTECTED]
https://listman.redhat.com/mailman/listinfo/redhat-list

Reply via email to