[ previous ] [ next ] [ threads ]
 
 From:  Mark Pimentel <mpimentel at dsl dot ca>
 To:  "Christopher M. Iarocci" <iarocci at eastendsc dot com>, Matchstick <matchstick at oofg dot com>
 Cc:  m0n0wall at lists dot m0n0 dot ch
 Subject:  Re: [m0n0wall] M0n0wall to IPCop VPN
 Date:  Mon, 20 Sep 2004 19:45:09 -0400 (EDT)
This is my IPCOP ipsec.conf:

config setup
        interfaces=%defaultroute
        klipsdebug=none
        plutodebug=none
        plutoload=%search
        plutostart=%search
        uniqueids=yes
        nat_traversal=yes

conn %default
        keyingtries=0

conn block
    auto=ignore

conn private
    auto=ignore

conn private-or-clear
    auto=ignore

conn clear-or-private
    auto=ignore

conn clear
    auto=ignore

conn packetdefault
    auto=ignore

conn ipcop-mono
        compress=no
        left=<ipcop public ip>
        leftsubnet=<network behind ipcop>/mask
        leftnexthop=%defaultroute
        type=tunnel
        authby=secret
        pfs=yes
        right=%any
        rightsubnet=<network-behind-mono>/mask
        rightnexthop=%defaultroute
        auto=add

then set up your mono with standard settings (try
everything checked off first).  Seems to work for me.

 --- "Christopher M. Iarocci" <iarocci at eastendsc dot com>
wrote: 
> Matchstick wrote:
> 
> >Hi,
> >
> >has anyone successfully set up an IPSec VPN
> connection between M0n0wall
> >and IPCop.  ?
> >
> >I've been trying intermittently for a while now
> with no real success
> >so if someone has got it to work and can give me
> some pointers it
> >would be much appreciated.
> >
> >Thanks
> >  
> >
> I have done this in the past, but it was a LONG time
> ago.  Somewhere in 
> the order of one of the first releases of m0n0 that
> included IPSec 
> capabilities with dynamic WAN ips.  It certainly can
> be done.  Exactly 
> how, I don't really remember.  I had the tunnel up
> and running reliably 
> for about 4 months before not needing it anymore.
> 
> Chris
> 
> 
>
---------------------------------------------------------------------
> To unsubscribe, e-mail:
> m0n0wall dash unsubscribe at lists dot m0n0 dot ch
> For additional commands, e-mail:
> m0n0wall dash help at lists dot m0n0 dot ch
> 
>