IPv6 readyNote: This archive passes through spamassassin. Every mail marked with the subject "*****SPAM*****" has exceed a certain threshold of spam-like behaviour.

[Users] PGPnet as a roadwarrior

From: Alaa Oumansour (alaa.oumansour_at_telia.com)
Date: Sat Mar 30 2002 - 18:51:21 CET


Hi everybody,

 I am trying to secure my wlan network at home using IPSec. I have a gateway/access point where Freeswan is installed(1.96 on kernel 2.4.18). On the other side, I have a laptop runing win98 and PGPnet 6.5.8. I consider my laptop as a road warrior and I want to grant it the access to the all internet.
 My configuartion is as follows:

config setup
    ipsec0=eth2"
     klipsdebug=none
     plutodebug=none
     plutoload=%search
     plutostart=%search
     uniqueids=yes

conn w
        auto=add
        type=tunnel
        left=192.168.2.2 ------->My laptop
        right=192.168.2.1 ------>My gateway/AP
        keyexchange=ike
        keylife=8h
        keyingtries=3
        pfs=yes
        rekeymargin=9
        rekeyfuzz=25%

In the PGPNet side, I created a secure host 192.168.2.1 with the appropriate parameters.
After starting the connection, the key exchange seem to succeed, and the SA is created. Nevertheless, when I try to ping outside my gateway, my ping timeout.
After dumping the traffic, I noticed one thing:
 All the outboud traffic leaving my laptop going somewhere else than my gateway is not encrypted.
 All the inboud traffic coming from my gateway towards the laptop go trough ipsec0--->Encrypted.
I tried to configure my PGPNet to secure a subnet with ip address 0.0.0.0/0(everybody), but he refused.
I would be grateful if anybody have experienced such a thing, or have any suggestions how to deal with the problem

Thank you in advance,

/Alaa

_______________________________________________
Users mailing list
Users_at_lists.freeswan.org
http://lists.freeswan.org/mailman/listinfo/users



This archive was generated by hypermail 2.1.3 : Mon Jul 29 2002 - 05:19:47 CEST