| Abstract |
This HowTo will cover the basic and advanced steps setting up a VPN using IPsec based on the Linux Kernels 2.6. Since there is a vast amount of documentation available for the Linux Kernel 2.4, this HowTo will concentrate on the new IPsec Features in the 2.6 kernel. |
The latest version of this document can always be found at The Linux Documentation Project and at the official homepage http://www.ipsec-howto.org.
I have used numeruos HowTos in the past. Most were very valuable to me. When the new IPsec features in the Linux Kernel were implemented I started to play around using them. Soon I found out that only very little documentation exists. That started me writing this HowTo.
This document is broken down into 7 chapters.
This section
IPsec theory. Essentially the IPsec protocols.
This section will describe how to setup Openswan on the Kernel 2.6.
This section describes how to setup an IPsec VPN using the KAME tools setkey and racoon. This now includes NAT-Traversal.
This section describes how to setup an IPsec VPN using OpenBSD isakmpd IKE daemon.
This section describes how to generate X.509 Certificates using the openssl-Command.
This section gives some hints on XAUTH and on useful iptables-rules.
Matija Nalis
Fridtjof Busse
Uwe Beck
Juanjo Ciarlante
Ervin Hegedus
Barabara Kane
Alois Schmid
Copyright (c) 2003 Ralf Spenneberg
Please freely copy and distribute (sell or give away) this document in any format. It's requested that corrections and/or comments be fowarded to the document maintainer. You may create a derivative work and distribute it provided that you:
Send your derivative work (in the most suitable format such as sgml) to the LDP (Linux Documentation Project) or the like for posting on the Internet. If not the LDP, then let the LDP know where it is available.
License the derivative work with this same license or use GPL. Include a copyright notice and at least a pointer to the license used.
Give due credit to previous authors and major contributors.
If you're considering making a derived work other than a translation, it's requested that you discuss your plans with the current maintainer.
The author assumes no responsibility for anything done with this document, nor does he make any warranty, implied or explicit. If your dog dies, the author may not be made responsible!
| Next >>> | ||
| Theory |