Koozali.org: home of the SME Server

Obsolete Releases => SME 7.x Contribs => Topic started by: aberlake on February 12, 2012, 02:31:56 PM

Title: Site to Site VPN SME 7.5.1
Post by: aberlake on February 12, 2012, 02:31:56 PM
Hi,

I'd like to be able to create a site to site VPN using two SME 7.5.1 boxes. Managed this many years ago using Free S-WAN on SME 6.x! I've tried following instructions for SME 7.1 / 7.3 on the Wiki Howtoe here: http://wiki.contribs.org/Ipsec however there appears to be an issue with the replacement ifup-ipsec scripts. When I try to bring up ipsec0 I get multiple errors:

RTNETLINK answers: File exists
mktemp: cannot create temp file /etc/racoon/psk.uH6201: No such file or directory
/etc/sysconfig/network-scripts/ifup-ipsec: line 227: $tmpfile: ambiguous redirect
/etc/sysconfig/network-scripts/ifup-ipsec: line 228: $tmpfile: ambiguous redirect
mv: missing file argument
Try `mv --help' for more information.
/etc/sysconfig/network-scripts/ifup-ipsec: line 232: /etc/racoon/destination_sme_external_ip.conf: No such file or directory
/etc/sysconfig/network-scripts/ifup-ipsec: line 239: /etc/racoon/destination_sme_external_ip.conf: No such file or directory
mktemp: cannot create temp file /etc/racoon/racoon.aj6206: No such file or directory
/etc/sysconfig/network-scripts/ifup-ipsec: line 286: $racoontmp: ambiguous redirect
/etc/sysconfig/network-scripts/ifup-ipsec: line 287: $racoontmp: ambiguous redirect
mv: missing file argument
Try `mv --help' for more information.
/etc/sysconfig/network-scripts/ifup-ipsec: line 292: /usr/sbin/racoon: No such file or directory

Has anyone experienced issues like this? Any help greatly appreciated!!!

Richard
Title: Re: Site to Site VPN SME 7.5.1
Post by: Stefano on February 12, 2012, 02:56:51 PM
AFAIK ipsec contrib is not supported anymore

you should take a look here: http://wiki.contribs.org/OpenVPN_SiteToSite
Title: Re: Site to Site VPN SME 7.5.1
Post by: aberlake on February 12, 2012, 09:18:04 PM
Many thanks to Stefano. Open VPN contrib really rocks! Many thanks also to Daniel B for such a simple to use and clearly documented contrib. It just works :)