This is my IPCOP ipsec.conf:
config setup
interfaces=%defaultroute
klipsdebug=none
plutodebug=none
plutoload=%search
plutostart=%search
uniqueids=yes
nat_traversal=yes
conn %default
keyingtries=0
conn block
auto=ignore
conn private
auto=ignore
conn private-or-clear
auto=ignore
conn clear-or-private
auto=ignore
conn clear
auto=ignore
conn packetdefault
auto=ignore
conn ipcop-mono
compress=no
left=<ipcop public ip>
leftsubnet=<network behind ipcop>/mask
leftnexthop=%defaultroute
type=tunnel
authby=secret
pfs=yes
right=%any
rightsubnet=<network-behind-mono>/mask
rightnexthop=%defaultroute
auto=add
then set up your mono with standard settings (try
everything checked off first). Seems to work for me.
--- "Christopher M. Iarocci" <iarocci at eastendsc dot com>
wrote:
> Matchstick wrote:
>
> >Hi,
> >
> >has anyone successfully set up an IPSec VPN
> connection between M0n0wall
> >and IPCop. ?
> >
> >I've been trying intermittently for a while now
> with no real success
> >so if someone has got it to work and can give me
> some pointers it
> >would be much appreciated.
> >
> >Thanks
> >
> >
> I have done this in the past, but it was a LONG time
> ago. Somewhere in
> the order of one of the first releases of m0n0 that
> included IPSec
> capabilities with dynamic WAN ips. It certainly can
> be done. Exactly
> how, I don't really remember. I had the tunnel up
> and running reliably
> for about 4 months before not needing it anymore.
>
> Chris
>
>
>
---------------------------------------------------------------------
> To unsubscribe, e-mail:
> m0n0wall dash unsubscribe at lists dot m0n0 dot ch
> For additional commands, e-mail:
> m0n0wall dash help at lists dot m0n0 dot ch
>
>
|