Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 6 replies
  • Subscribers 3 subscribers
  • Views 2475 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

autogeneration of ipsec.conf

Hamfist666
I've been looking around in vain for the mechanism that rebuilds the ipsec.conf automatically.  I would like to insert some of my own crud in the ipsec.conf, as I seem to be having some trouble with a PIX firewall.  I suspect there may be a license issue with this, but I have no way to modify this file.  Astaro just keeps erasing what I do.  [:(]
  [:S]


This thread was automatically locked due to age.
Parents
  • 0
    I would like to second this request.  I work with a variety of vendored firewall and VPN solutions and would like to make ASL my standard reccomendation.  However, I need to be able to work with the ipsec.conf file directly sometimes to help the process along.  Any suggestions or documentation that I can read that will help?

    Thanks!

    Jason
  • 0 in reply to darkjae
    Hi Hamfist666 and darkjae,

    depending on your needs we can change something in our MiddleWare (creates ipsec.conf). What exactly do you need?
  • 0 in reply to Markus Hennig
    What would be ideal would be some thing that allows me to just specify a connection subsection how I want it. Including things light leftfirewall=, rightnexthop=, etc.  Though the connection setup is fairly elegant, it just doesn't let you tap all of FreeS/WAN, which I'd like.

    Another question:  where does the output of the IKE debugging show up? I've hunted everywhere  [:(]
  • 0 in reply to Hamfist666
    Take a look in /var/log/auth

    MC
  • 0 in reply to Mike_Cunningham
    What would be quite helpful is a button on the VPN configuration page that generates an exact copy of the ipsec.conf and ipsec.secrets files utilized by FreeS/WAN.

    With this information in hand, setting up Astaro to establish a VPN tunnel to a FreeS/WAN or other IPSEC compliant box would be much easier.
  • 0 in reply to Greg Myers
    That hit's it right on the head.  Somthing that can dump out the key config files and allow for direct editing through the windows front end.  I think that would be a great feature to add to many aspect of the Web Admin.  An 'advanced view' so to speak.
Reply
  • 0 in reply to Greg Myers
    That hit's it right on the head.  Somthing that can dump out the key config files and allow for direct editing through the windows front end.  I think that would be a great feature to add to many aspect of the Web Admin.  An 'advanced view' so to speak.
Children
No Data
Unfiltered HTML