Koozali.org: home of the SME Server

turning off the vpn?

john

turning off the vpn?
« on: July 19, 2002, 07:16:54 AM »
Hi all.

I have freeswan installed and have the dmc-mitel-freeswan rpm installed. I don't think i need help setting the VPN up (my wife's network guy will (hopefully) do that and hopefully knows what he's doing), but I do have a question.

I will be VPNing between Mitel5.1.2 and a netscreen firewall into my wife's company network. Because we're doing this server to server (as opposed to using the netscreen client software to connect--doesn't seem to work in win98...), I need to know if I can easily disconnect and reconnect the VPN. Thing is, they don't want a permanent connection between them and me. Understandable i guess. (For reference, everything behind their firewall is Nt/win2k.)

Short version: can I turn the VPN connection on and off easily?

For all I know there is a "disconnect" button on the server manager page. But I don't have the connection active yet to check. They need an answer before they'll let me connect.

thanks,
john

Steve Bush

Re: turning off the vpn?
« Reply #1 on: July 19, 2002, 08:09:07 AM »
The only simple way to turn this on and off would be to ssh to a server console with a Windows utility like putty and execute:
service ipsec stop

Then when you are ready to bring up the service, execute:
service ipsec start

I've never actually done this, but it should work, because I can execute:
service ipsec status
  It comes back with:
    IPsec running
    pluto pid 1022

I hope this helps.....

john

Re: turning off the vpn?
« Reply #2 on: July 19, 2002, 08:38:14 AM »
Steve Bush wrote:
>
> The only simple way to turn this on and off would be to ssh
> to a server console with a Windows utility like putty and
> execute:
> service ipsec stop
>
> Then when you are ready to bring up the service, execute:
> service ipsec start
>
> I've never actually done this, but it should work, because I
> can execute:
> service ipsec status
>   It comes back with:
>     IPsec running
>     pluto pid 1022
>
> I hope this helps.....

yes it does. that'll do.

thanks,
john