From mboxrd@z Thu Jan  1 00:00:00 1970
Return-Path: <iluxa@kp.ru>
X-Spam-Checker-Version: SpamAssassin 3.2.5 (2008-06-10) on sa.int.altlinux.org
X-Spam-Level: 
X-Spam-Status: No, score=-1.0 required=5.0 tests=AWL,BAYES_00,
	DNS_FROM_OPENWHOIS autolearn=no version=3.2.5
X-Virus-Scanned: Debian amavisd-new at mail.kp
From: Ilia Menchikh <iluxa@kp.ru>
To: sysadmins@lists.altlinux.org
In-Reply-To: <4E27564E.7000809@gmail.com>
References: <30328219.19.1309949853101.JavaMail.javamailuser@localhost>
	<4E167914.8000806@bgc.perm.ru>	<20110708083356.GA12391@t60p.mithraen.ru>
	<20110708154212.186abe18@bird.localdomain>
	<20110720203431.GA1031942@mw.mithraen.ru> <4E27564E.7000809@gmail.com>
Content-Type: text/plain; charset="UTF-8"
Date: Thu, 21 Jul 2011 14:22:42 +0400
Message-ID: <1311243762.1864.6.camel@iluxa>
Mime-Version: 1.0
X-Mailer: Evolution 2.32.2 
Content-Transfer-Encoding: 8bit
Subject: Re: [Sysadmins] ipsec
X-BeenThere: sysadmins@lists.altlinux.org
X-Mailman-Version: 2.1.12
Precedence: list
Reply-To: ALT Linux sysadmins' discussion <sysadmins@lists.altlinux.org>
List-Id: ALT Linux sysadmins' discussion <sysadmins.lists.altlinux.org>
List-Unsubscribe: <https://lists.altlinux.org/mailman/options/sysadmins>,
	<mailto:sysadmins-request@lists.altlinux.org?subject=unsubscribe>
List-Archive: <http://lists.altlinux.org/pipermail/sysadmins>
List-Post: <mailto:sysadmins@lists.altlinux.org>
List-Help: <mailto:sysadmins-request@lists.altlinux.org?subject=help>
List-Subscribe: <https://lists.altlinux.org/mailman/listinfo/sysadmins>,
	<mailto:sysadmins-request@lists.altlinux.org?subject=subscribe>
X-List-Received-Date: Thu, 21 Jul 2011 10:23:36 -0000
Archived-At: <http://lore.altlinux.org/sysadmins/1311243762.1864.6.camel@iluxa/>
List-Archive: <http://lore.altlinux.org/sysadmins/>

В Чт., 21/07/2011 в 01:27 +0300, Patlasov YuriI пишет:
> Здравствуйте.
> 
> У кого получилось построить VPN сеть: с одной стороны Windows клиенты по 
> протоколу L2tp ipsec с другой alt linux сервер ???
> 

Работает такое, только  на сервер Debian :) 

Клиенты - Mac, Windows, Linux, Android

 The strongSwan VPN suite is based on the IPsec stack in standard Linux
2.6  kernels. It supports both the IKEv1 and IKEv2 protocols.
 
 StrongSwan is one of the two remaining forks of the original FreeS/WAN
 project and focuses on IKEv2 support, X.509 authentication and complete
PKI  support. For a focus on Opportunistic Encryption (OE) and
interoperability  with non-standard IPsec features, see Openswan.
 .
 This metapackage installs the packages required to maintain IKEv1 and
IKEv2  connections via ipsec.conf or ipsec.secrets.
Homepage: http://www.strongswan.org


> Борюсь уже долго racoon.
> С помощью xl2tpd сервера подсоединяться получилось, но ipsec прикрутить 
> не в какую.
> 
> 
> Почему выбрано именно это протокол.
> pptp - протокол из-за очень хороших провайдеров не всегда подымается.
> openVPN - для Винды нужно ставить клиент.
> L2tp с ipsec - только остается.
> 
> Юрий.
> _______________________________________________
> Sysadmins mailing list
> Sysadmins@lists.altlinux.org
> https://lists.altlinux.org/mailman/listinfo/sysadmins