Date: Wed, 19 Dec 2001 00:47:52 -0800 (PST) From: ben <ben@www.stonehenge-net.com> To: Eric <eric@tek-shop.com> Cc: freebsd-questions@FreeBSD.ORG Subject: Re: VPN via mpd help Message-ID: <20011219004538.K43410-100000@www> In-Reply-To: <200112190824.fBJ8Okp39193@syndicate.tek-shop.com>
next in thread | previous in thread | raw e-mail | index | archive | help
eric - check out the article on vpn at freebsddiary.org: http://www.freebsddiary.org/ipsec-tunnel.php i'm not sure if this is the same mechanism you're trying to use, but it seems to work. i also use a linksys, and as long as you've got a recent firmware, it supports 'vpn pass through'. you need a windows machine, or more knowledge than i've got of tftp to update the firmware. good luck, ben On Wed, 19 Dec 2001, Eric wrote: > hey everyone... > > bear with me, lengthy description to follow... > > I want to set up a VPN from one office to another. I'm not looking for remote > clients to be able to connect to the network. I just want my two buildings to > appear as one seamless one. For now, I'm testing this from my office to my > home. > > I'm running 4.4 release on both my work machine and my home machine. I have > also compiled and installed mpd-netgraph on both machines. I haven't done > anything special to either kernel (should I?). > > Work: The network lives in the 172.3.0.0/16 subnet. Before reaching the > outside world, the connection travels thru a firewall. I have opened port > 1723 and allowed GRE traffic to flow thru. > > Home: I have a DSL connection here with a semi-static IP. I use a Linksys > switch/router to handle the pppoe stuff with the DSL modem. The Linksys > limits my home network to 192.168.1.0/24. I've mapped port 1723 to my home > bsd box, but I don't know if the Linksys understands GRE (might that be a > problem?). > > I've done what research I can on the internet about VPN setup using mpd. > There's not much. The mpd documentation is a bit lacking and misleading in > some areas; extensive in others. > > In the mpd.conf file, there is a sample entry for a vpn. I'm using that, but > I've modified the numbers to match mine. I have done the same at work. I have > also used the vpn entry in the mpd.links file, but again modified the numbers. > > Then I start mpd as a daemon on both machines. According to the logs (they > look the same at home and at work), neither box can connect to the other, so > it says the link is DOWN. > > Most of the help online that I can find talks about Win 2000 clients > connecting to a pptp server. I can't find any good help on simply setting up > a transparent pipe. Whats the difference between pptp and vpn? > > ifconfig shows my ng0 interface on both machines. It labels it as > pointopoint, but it doesn't show it as UP. Do I need to enable a tunnel > device in my kernel? Or a PPP device? Do I need to configure ng0 with > ifconfig, or will mpd do that for me once it's happy. > > If my Linksys router is a problem, can I plug the DSL modem directly into the > bsd box and have bsd handle pppoe, and then run a tunnel over that? Is that > all mpd's job? > > I apologize for sounding hopeless, ignorant, and naive but I've tried to > solve my problems online, and have met with failure. I would appreciate any > help anybody can give on setting up a "simple" tunnel. > > thanks > > eric > www.tek-shop.com > > To Unsubscribe: send mail to majordomo@FreeBSD.org > with "unsubscribe freebsd-questions" in the body of the message > To Unsubscribe: send mail to majordomo@FreeBSD.org with "unsubscribe freebsd-questions" in the body of the message
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20011219004538.K43410-100000>