Topic: VPN IPSec Help

[David Rinaldi]

I have been following some of threads about installing and configuring freeswan-sme55 and I guess I am confused about some of the details of the configuration.

THE REASON I AM CONFUSED IS THAT IT WORKS!

It entails SME5.5u2 on one end and an xp VPN client on the other. I have 2 T1's in the same building, the first T1 is through a cable-modem, the second T1 is ADSL.

I installed and followed the below how-to for my installation which is:
http://myezserver.com/downloads/mitel/beta/freeswan-sme55/freeswan-howto.html
dmc-mitel-freeswan-0.4-12.noarch.rpm

But, I have NOT set up the SME5.5u2 VPN IPSEC through the screen. The screen DOES display the RSA key.

The details are as follows:

Server Side:
SME5.5u2 server/gateway mode
static ip using cable-modem 24.xxx.xx.xx (T1-bandwidth)
Gateway address: 192.168.1.1
Network: 192.168.1.0

Client Side:
Windows XP Pro no service pack - DSL Modem
Free VPN client supplied with XP
In connecting the client to the internet with the DSL service in creates 2 connections.

The first connection is the modem to the card-169.254.244.220/255.255.0.0

Then when I connect to the ISP I am assigned a dynamic client and server address
server-66.72.47.254, client-66.72.47.179.
I then connect using the XP pro vpn client to my domain name, www.mydomain.com, and I sign in.

When this is complete another connection is created which has my internal SME5.5u2 address 192.168.1.1 and it assigns a local address through DHCP which is 192.168.1.247.

I can now ping, create/read a microsoft network drive, etc.

I have not used the RSA Key from the freeswan server install on the client.

So, again should this be working since I have not defined a network on the VPN IPSEC screen as well as not adding the RSA key to the client.


Thanks in advance

David

[Michael Smith]

FreeS/WAN is designed to establish a VPN "tunnel" through the Internet linking two or more LANs together; what you've done, I think, is simply establish a PPtP VPN to your SME server, which it is admirably equipped to do.  I should also note that you can have BOTH operational at the same time, and if you establish a PPtP connection to one LAN you can access resources across the FreeS/WAN link as well.

[Bill Talcott]

I agree, it sounds like you're making a PPTP connection, which SME supports out of the box. I don't know if WinXP has built-in IPSec client support like that even...

[David Rinaldi]

Thanks for your post, I understand.

With that being said. is it possible to apply an RSA key to authenticate clients, in addition to user/password security?  

From reading endless posts, I find no real discussions that address this.

Thanks in advance.

David