This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

autogeneration of ipsec.conf

I've been looking around in vain for the mechanism that rebuilds the ipsec.conf automatically. I would like to insert some of my own crud in the ipsec.conf, as I seem to be having some trouble with a PIX firewall. I suspect there may be a license issue with this, but I have no way to modify this file. Astaro just keeps erasing what I do. [:(]
[:S]

This thread was automatically locked due to age.

Parents

0 darkjae over 24 years ago

I would like to second this request. I work with a variety of vendored firewall and VPN solutions and would like to make ASL my standard reccomendation. However, I need to be able to work with the ipsec.conf file directly sometimes to help the process along. Any suggestions or documentation that I can read that will help?

Thanks!

Jason
Cancel
Vote Up 0 Vote Down

Cancel

Reply

0 darkjae over 24 years ago

I would like to second this request. I work with a variety of vendored firewall and VPN solutions and would like to make ASL my standard reccomendation. However, I need to be able to work with the ipsec.conf file directly sometimes to help the process along. Any suggestions or documentation that I can read that will help?

Thanks!

Jason
Cancel
Vote Up 0 Vote Down

Cancel

Children

0 Markus Hennig over 24 years ago in reply to darkjae

Hi Hamfist666 and darkjae,

depending on your needs we can change something in our MiddleWare (creates ipsec.conf). What exactly do you need?
Cancel
Vote Up 0 Vote Down

Cancel
0 Hamfist666 over 24 years ago in reply to Markus Hennig

What would be ideal would be some thing that allows me to just specify a connection subsection how I want it. Including things light leftfirewall=, rightnexthop=, etc. Though the connection setup is fairly elegant, it just doesn't let you tap all of FreeS/WAN, which I'd like.

Another question: where does the output of the IKE debugging show up? I've hunted everywhere [:(]
Cancel
Vote Up 0 Vote Down

Cancel
0 Mike_Cunningham over 23 years ago in reply to Hamfist666

Take a look in /var/log/auth

MC
Cancel
Vote Up 0 Vote Down

Cancel
0 Greg Myers over 23 years ago in reply to Mike_Cunningham

What would be quite helpful is a button on the VPN configuration page that generates an exact copy of the ipsec.conf and ipsec.secrets files utilized by FreeS/WAN.

With this information in hand, setting up Astaro to establish a VPN tunnel to a FreeS/WAN or other IPSEC compliant box would be much easier.
Cancel
Vote Up 0 Vote Down

Cancel
0 Hamfist666 over 23 years ago in reply to Greg Myers

That hit's it right on the head. Somthing that can dump out the key config files and allow for direct editing through the windows front end. I think that would be a great feature to add to many aspect of the Web Admin. An 'advanced view' so to speak.
Cancel
Vote Up 0 Vote Down

Cancel