Thanks Josh, and i do hope this configuration guide will be posted for
next version of m0n0wall user guide.
 
Thanks Chris Buechler and Jim McBeath.
 
Joweelee
 
> On Wed, 10 Nov 2004 21:59:41 -0800, Josh McAllister <josh at bluehornet dot com> wrote:
> > Here you go:
> >
> > # /etc/ipsec.conf - FreeS/WAN IPsec configuration file
> >
> > version 2.0     # conforms to second version of ipsec.conf specification
> >
> > config setup
> >         interfaces=%defaultroute
> >         klipsdebug=none
> >         plutodebug=none
> >         uniqueids=yes
> >
> > # defaults for subsequent connection descriptions
> >
> > conn %default
> >         # How persistent to be in (re)keying negotiations (0 means
> > very).
> >         keyingtries=0
> >         #compress=yes
> >
> > conn block
> >     auto=ignore
> >
> > conn private
> >     auto=ignore
> >
> > conn private-or-clear
> >     auto=ignore
> >
> > conn clear-or-private
> >     auto=ignore
> >
> > conn clear
> >     auto=ignore
> >
> > conn packetdefault
> >     auto=ignore
> >
> > conn josh
> >         type=tunnel
> >         left=ip.add.of.m0n0
> >         leftsubnet=m0n0.side.subnet/24
> >         leftnexthop=%defaultroute
> >         right=ip.add.of.freeswan
> >         rightsubnet=freeswan.side.subnet/24
> >         rightnexthop=%defaultroute
> >         authby=secret
> >         auth=esp
> >         esp=3des-md5-96
> >         pfs=no
> >         auto=start
> >
> > m0n0-side:
> > Phase1
> > Neg. mode = main
> > Enc. Alg = 3DES
> > Hash Alg = MD5
> > DH key grp = 5
> >
> > Phase2
> > Protocol = ESP
> > Uncheck all Enc. Alg. Except 3des
> > Hash alg = md5
> > PFS key group = off
> >
> >
> >
> > -----Original Message-----
> > From: Jowee Lee [mailto:joweelee at gmail dot com]
> > Sent: Wednesday, November 10, 2004 6:35 PM
> > To: Josh McAllister
> > Cc: m0n0wall at lists dot m0n0 dot ch
> > Subject: Re: [m0n0wall] Reccomended windows VPN Software
> >
> > Hi Josh,
> >
> > Would you mind sharing your ipsec.conf configuration using preshared
> > key as IPsec client tunnel to m0n0wall? I would greatly appreciate
> > that. Thanks.
> >
> > Joweelee
> >
> > On Wed, 10 Nov 2004 16:48:32 -0800, Josh McAllister
> > <josh at bluehornet dot com> wrote:
> > > I've use Freeswan on linux. Works well as tunnel endpoint for M0n0.
> > >
> > >
> > >
> > > -----Original Message-----
> > > From: Jowee Lee [mailto:joweelee at gmail dot com]
> > > Sent: Wednesday, November 10, 2004 5:39 PM
> > > To: m0n0wall at lists dot m0n0 dot ch
> > > Subject: Re: [m0n0wall] Reccomended windows VPN Software
> > >
> > > Hi,
> > >
> > > Is there any IPsec client in linux can be use for m0n0wall? or the
> > > only way we could do is configure our own racoon as client?
> > >
> > > For Windows i had tested SSH Sentinel and SoftRemote LT work with
> > > m0n0wall.
> > >
> > > Joweelee
> > >
> > > On Thu, 11 Nov 2004 01:19:00 +0100, Daniele Guazzoni
> > > <daniele dot guazzoni at gcomm dot ch> wrote:
> > > > I use TheGreenBow.
> > > > Is not for free but it is fast, reliable and simple.
> > > >
> > > > http://www.thegreenbow.com
> > > >
> > > > Daniele
> > > >
> > > > On Wed, 2004-11-10 at 20:37, Jonathan S. Romero wrote:
> > > > > Hello,
> > > > >
> > > > > For using windows clients to VPN into m0n0wall, what IPSEC client
> > > > > package do you use?  I tried experimenting with PPTP but I couldnt
> > > get
> > > > > windows domain logins to work over this, even with a WINS server.
> > > > >
> > > >
> > > >
> > ---------------------------------------------------------------------
> > > > To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch
> > > > For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch
> > > >
> > > >
> > >
> > > ---------------------------------------------------------------------
> > >
> > >
> > > To unsubscribe, e-mail: m0n0wall dash unsubscribe at lists dot m0n0 dot ch
> > > For additional commands, e-mail: m0n0wall dash help at lists dot m0n0 dot ch
> > >
> > >
> >
> >
>